jazz-tools 0.18.4 → 0.18.6

package/dist/better-auth/auth/react.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"react.d.ts","sourceRoot":"","sources":["../../../src/better-auth/auth/react.tsx"],"names":[],"mappings":"AAGA,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,KAAK,EACV,OAAO,EACP,YAAY,EACZ,gBAAgB,EAChB,cAAc,EACf,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,KAAK,iBAAiB,EAIvB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,KAAK,iBAAiB,EAAiB,MAAM,OAAO,CAAC;AAC9D,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAE/C,KAAK,UAAU,GAAG,UAAU,CAC1B,OAAO,gBAAgB,CAAC;IACtB,OAAO,EAAE,CAAC,UAAU,CAAC,OAAO,gBAAgB,CAAC,CAAC,CAAC;CAChD,CAAC,CACH,CAAC;AAEF,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;6BA+E8jc,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;yBAAk7yW,CAAC;+BAAyD,CAAC;gCAA0D,CAAC;6BAAuD,CAAC;;;;;;;;;;;;;;;;;;;;;;;qBAA9K,CAAC;2BAAyD,CAAC;4BAA0D,CAAC;yBAAuD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBAAjmzW,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBAAD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;6BAAD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBAAD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBAAD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBAAD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBAAD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBAAD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBAAD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBAAD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;6BAAD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBAAD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;6BAAD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBAAD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBAAD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBAAD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBAAD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;qBAAs6qe,CAAC;2BAAyD,CAAC;4BAA0D,CAAC;sBAAoD,CAAC;;;;;;;;;;;;;;;;;;;;iBAA3K,CAAC;uBAAyD,CAAC;wBAA0D,CAAC;kBAAoD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBAAllre,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;6BAAD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBAAD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBAAD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBAAD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBAAD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gBAAsp+f,CAAC;iBAAmC,CAAC;iBAA0C,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;6BAAvu+f,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBAAD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBAAD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;aAAx9a,CAAC;mBAA+C,CAAC;eAAqC,CAAC;;;;;iBAAyW,CAAC;iBAAuC,CAAC;;YAA2D,CAAC;gBAA2C,CAAC;gBAA+C,CAAC;gBAA+C,CAAC;sBAA4C,CAAC;cAA4C,CAAC;cAAkD,CAAC;eAAmC,CAAC;mBAA4G,CAAC;yBAA6B,CAAC;;eAAiD,CAAC;;;aAAqH,CAAC;YAAmC,CAAC;;;;;;;;;;;;YAA+iB,CAAC;aAAoB,CAAC;cAAqB,CAAC;cAAqB,CAAC;;aAAsG,CAAC;oBAAoE,CAAC;cAAoC,CAAC;mBAAqG,CAAC;yBAA6E,CAAC;;;uBAA0F,CAAC;+GAA6K,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;UA/Et/F,CAAC;AAElE;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,YAAY,CAAC,EAC3B,QAAQ,EACR,gBAAgB,GACjB,EAAE,iBAAiB,CAAC;IACnB,gBAAgB,EAAE,UAAU,CAAC;CAC9B,CAAC,6BAmBD;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,+BAA+B,GAC1C,CAAC,SACG,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC,GACjD,gBAAgB,SAEb;IAAE,gBAAgB,EAAE,UAAU,CAAA;CAAE,GAAG,iBAAiB,CAAC,CAAC,CAAC,4CAS/D,CAAC"}
+{"version":3,"file":"react.d.ts","sourceRoot":"","sources":["../../../src/better-auth/auth/react.tsx"],"names":[],"mappings":"AAEA,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAGtD,OAAO,EAAE,KAAK,iBAAiB,EAAE,MAAM,OAAO,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAE/C,KAAK,UAAU,GAAG,UAAU,CAC1B,OAAO,gBAAgB,CAAC;IACtB,OAAO,EAAE,CAAC,UAAU,CAAC,OAAO,gBAAgB,CAAC,CAAC,CAAC;CAChD,CAAC,CACH,CAAC;AAEF;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,YAAY,CAAC,EAC3B,QAAQ,EACR,gBAAgB,GACjB,EAAE,iBAAiB,CAAC;IACnB,gBAAgB,EAAE,UAAU,CAAC;CAC9B,CAAC,6BAmBD"}

package/dist/better-auth/auth/react.js

@@ -1,15 +1,8 @@
 "use client";
 
 // src/better-auth/auth/react.tsx
-import {
-  JazzReactProvider,
-  useAuthSecretStorage,
-  useJazzContext
-} from "jazz-tools/react";
+import { useAuthSecretStorage, useJazzContext } from "jazz-tools/react-core";
 import { useEffect } from "react";
-import { createContext } from "react";
-import { jsx } from "react/jsx-runtime";
-var AuthContext = createContext(null);
 function AuthProvider({
   children,
   betterAuthClient
@@ -29,12 +22,7 @@ function AuthProvider({
   }, [betterAuthClient, context, authSecretStorage]);
   return children;
 }
-var JazzReactProviderWithBetterAuth = (props) => {
-  return /* @__PURE__ */ jsx(JazzReactProvider, { ...props, children: /* @__PURE__ */ jsx(AuthProvider, { betterAuthClient: props.betterAuthClient, children: props.children }) });
-};
 export {
-  AuthContext,
-  AuthProvider,
-  JazzReactProviderWithBetterAuth
+  AuthProvider
 };
 //# sourceMappingURL=react.js.map

package/dist/better-auth/auth/react.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/better-auth/auth/react.tsx"],"sourcesContent":["\"use client\";\n\nimport type { ClientOptions } from \"better-auth\";\nimport { createAuthClient } from \"better-auth/client\";\nimport type {\n  Account,\n  AccountClass,\n  AnyAccountSchema,\n  CoValueFromRaw,\n} from \"jazz-tools\";\nimport {\n  type JazzProviderProps,\n  JazzReactProvider,\n  useAuthSecretStorage,\n  useJazzContext,\n} from \"jazz-tools/react\";\nimport { useEffect } from \"react\";\nimport { type PropsWithChildren, createContext } from \"react\";\nimport { jazzPluginClient } from \"./client.js\";\n\ntype AuthClient = ReturnType<\n  typeof createAuthClient<{\n    plugins: [ReturnType<typeof jazzPluginClient>];\n  }>\n>;\n\nexport const AuthContext = createContext<AuthClient | null>(null);\n\n/**\n * @param props.children - The children to render.\n * @param props.betterAuthClient - The BetterAuth client with the Jazz plugin.\n *\n * @example\n * ```ts\n * const betterAuthClient = createAuthClient({\n *   plugins: [\n *     jazzPluginClient(),\n *   ],\n * });\n *\n * <AuthProvider betterAuthClient={betterAuthClient}>\n *   <App />\n * </AuthProvider>\n * ```\n */\nexport function AuthProvider({\n  children,\n  betterAuthClient,\n}: PropsWithChildren<{\n  betterAuthClient: AuthClient;\n}>) {\n  const context = useJazzContext();\n  const authSecretStorage = useAuthSecretStorage();\n\n  if (betterAuthClient.jazz === undefined) {\n    throw new Error(\n      \"Better Auth client has been initialized without the jazzPluginClient\",\n    );\n  }\n\n  useEffect(() => {\n    betterAuthClient.jazz.setJazzContext(context);\n    betterAuthClient.jazz.setAuthSecretStorage(authSecretStorage);\n\n    // We need to subscribe to the session to let the plugin keep sync Jazz's and BetterAuth's session\n    return betterAuthClient.useSession.subscribe(() => {});\n  }, [betterAuthClient, context, authSecretStorage]);\n\n  return children;\n}\n\n/**\n * @param props - The props for the JazzReactProvider.\n * @param props.betterAuth - The options for the BetterAuth client.\n * @returns The JazzReactProvider with the BetterAuth plugin.\n *\n * @example\n * ```ts\n * <JazzReactProviderWithBetterAuth\n *  betterAuth={{\n *    baseURL: \"http://localhost:3000\",\n *  }}\n *  sync={{\n *    peer: \"ws://localhost:4200\",\n *  }}\n * >\n *   <App />\n * </JazzReactProviderWithBetterAuth>\n * ```\n */\nexport const JazzReactProviderWithBetterAuth = <\n  S extends\n    | (AccountClass<Account> & CoValueFromRaw<Account>)\n    | AnyAccountSchema,\n>(\n  props: { betterAuthClient: AuthClient } & JazzProviderProps<S>,\n) => {\n  return (\n    <JazzReactProvider {...props}>\n      <AuthProvider betterAuthClient={props.betterAuthClient}>\n        {props.children}\n      </AuthProvider>\n    </JazzReactProvider>\n  );\n};\n"],"mappings":";;;AAUA;AAAA,EAEE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,iBAAiB;AAC1B,SAAiC,qBAAqB;AAkFhD;AAzEC,IAAM,cAAc,cAAiC,IAAI;AAmBzD,SAAS,aAAa;AAAA,EAC3B;AAAA,EACA;AACF,GAEI;AACF,QAAM,UAAU,eAAe;AAC/B,QAAM,oBAAoB,qBAAqB;AAE/C,MAAI,iBAAiB,SAAS,QAAW;AACvC,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AAEA,YAAU,MAAM;AACd,qBAAiB,KAAK,eAAe,OAAO;AAC5C,qBAAiB,KAAK,qBAAqB,iBAAiB;AAG5D,WAAO,iBAAiB,WAAW,UAAU,MAAM;AAAA,IAAC,CAAC;AAAA,EACvD,GAAG,CAAC,kBAAkB,SAAS,iBAAiB,CAAC;AAEjD,SAAO;AACT;AAqBO,IAAM,kCAAkC,CAK7C,UACG;AACH,SACE,oBAAC,qBAAmB,GAAG,OACrB,8BAAC,gBAAa,kBAAkB,MAAM,kBACnC,gBAAM,UACT,GACF;AAEJ;","names":[]}
+{"version":3,"sources":["../../../src/better-auth/auth/react.tsx"],"sourcesContent":["\"use client\";\n\nimport { createAuthClient } from \"better-auth/client\";\nimport { useAuthSecretStorage, useJazzContext } from \"jazz-tools/react-core\";\nimport { useEffect } from \"react\";\nimport { type PropsWithChildren } from \"react\";\nimport { jazzPluginClient } from \"./client.js\";\n\ntype AuthClient = ReturnType<\n  typeof createAuthClient<{\n    plugins: [ReturnType<typeof jazzPluginClient>];\n  }>\n>;\n\n/**\n * @param props.children - The children to render.\n * @param props.betterAuthClient - The BetterAuth client with the Jazz plugin.\n *\n * @example\n * ```ts\n * const betterAuthClient = createAuthClient({\n *   plugins: [\n *     jazzPluginClient(),\n *   ],\n * });\n *\n * <AuthProvider betterAuthClient={betterAuthClient}>\n *   <App />\n * </AuthProvider>\n * ```\n */\nexport function AuthProvider({\n  children,\n  betterAuthClient,\n}: PropsWithChildren<{\n  betterAuthClient: AuthClient;\n}>) {\n  const context = useJazzContext();\n  const authSecretStorage = useAuthSecretStorage();\n\n  if (betterAuthClient.jazz === undefined) {\n    throw new Error(\n      \"Better Auth client has been initialized without the jazzPluginClient\",\n    );\n  }\n\n  useEffect(() => {\n    betterAuthClient.jazz.setJazzContext(context);\n    betterAuthClient.jazz.setAuthSecretStorage(authSecretStorage);\n\n    // We need to subscribe to the session to let the plugin keep sync Jazz's and BetterAuth's session\n    return betterAuthClient.useSession.subscribe(() => {});\n  }, [betterAuthClient, context, authSecretStorage]);\n\n  return children;\n}\n"],"mappings":";;;AAGA,SAAS,sBAAsB,sBAAsB;AACrD,SAAS,iBAAiB;AA2BnB,SAAS,aAAa;AAAA,EAC3B;AAAA,EACA;AACF,GAEI;AACF,QAAM,UAAU,eAAe;AAC/B,QAAM,oBAAoB,qBAAqB;AAE/C,MAAI,iBAAiB,SAAS,QAAW;AACvC,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AAEA,YAAU,MAAM;AACd,qBAAiB,KAAK,eAAe,OAAO;AAC5C,qBAAiB,KAAK,qBAAqB,iBAAiB;AAG5D,WAAO,iBAAiB,WAAW,UAAU,MAAM;AAAA,IAAC,CAAC;AAAA,EACvD,GAAG,CAAC,kBAAkB,SAAS,iBAAiB,CAAC;AAEjD,SAAO;AACT;","names":[]}

package/dist/better-auth/auth/server.d.ts

@@ -1,4 +1,23 @@
 import { BetterAuthPlugin } from "better-auth/plugins";
+type JazzPlugin = BetterAuthPlugin & {
+    schema: {
+        user: {
+            fields: {
+                accountID: {
+                    type: "string";
+                    required: false;
+                    input: false;
+                };
+                encryptedCredentials: {
+                    type: "string";
+                    required: false;
+                    input: false;
+                    returned: false;
+                };
+            };
+        };
+    };
+};
 /**
  * @returns The BetterAuth server plugin.
  *
@@ -10,5 +29,6 @@ import { BetterAuthPlugin } from "better-auth/plugins";
  * });
  * ```
  */
-export declare const jazzPlugin: () => BetterAuthPlugin;
+export declare const jazzPlugin: () => JazzPlugin;
+export {};
 //# sourceMappingURL=server.d.ts.map

package/dist/better-auth/auth/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../../src/better-auth/auth/server.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,gBAAgB,EAAwB,MAAM,qBAAqB,CAAC;AAG7E;;;;;;;;;;GAUG;AACH,eAAO,MAAM,UAAU,QAAO,gBAwL7B,CAAC"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../../src/better-auth/auth/server.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,gBAAgB,EAAwB,MAAM,qBAAqB,CAAC;AAM7E,KAAK,UAAU,GAAG,gBAAgB,GAAG;IACnC,MAAM,EAAE;QACN,IAAI,EAAE;YACJ,MAAM,EAAE;gBACN,SAAS,EAAE;oBACT,IAAI,EAAE,QAAQ,CAAC;oBACf,QAAQ,EAAE,KAAK,CAAC;oBAChB,KAAK,EAAE,KAAK,CAAC;iBACd,CAAC;gBACF,oBAAoB,EAAE;oBACpB,IAAI,EAAE,QAAQ,CAAC;oBACf,QAAQ,EAAE,KAAK,CAAC;oBAChB,KAAK,EAAE,KAAK,CAAC;oBACb,QAAQ,EAAE,KAAK,CAAC;iBACjB,CAAC;aACH,CAAC;SACH,CAAC;KACH,CAAC;CACH,CAAC;AAEF;;;;;;;;;;GAUG;AACH,eAAO,MAAM,UAAU,EAAE,MAAM,UAsQ9B,CAAC"}

package/dist/better-auth/auth/server.js

@@ -31,13 +31,13 @@ var jazzPlugin = () => {
                 before: async (user, context) => {
                   if (!contextContainsJazzAuth(context)) {
                     throw new APIError(422, {
-                      message: "JazzAuth is required"
+                      message: "JazzAuth is required on user creation"
                     });
                   }
                   return {
                     data: {
-                      accountID: context?.jazzAuth?.accountID,
-                      encryptedCredentials: context?.jazzAuth?.encryptedCredentials
+                      accountID: context.jazzAuth.accountID,
+                      encryptedCredentials: context.jazzAuth.encryptedCredentials
                     }
                   };
                 }
@@ -45,18 +45,15 @@ var jazzPlugin = () => {
             },
             verification: {
               create: {
-                before: async (verification, context) => {
-                  if (contextContainsJazzAuth(context)) {
-                    const parsed = JSON.parse(verification.value);
-                    const newValue = JSON.stringify({
-                      ...parsed,
-                      jazzAuth: context.jazzAuth
-                    });
-                    return {
-                      data: {
-                        value: newValue
+                after: async (verification, context) => {
+                  if (contextContainsJazzAuth(context) && verification.identifier.startsWith("sign-in-otp-")) {
+                    await context.context.internalAdapter.createVerificationValue(
+                      {
+                        value: JSON.stringify({ jazzAuth: context.jazzAuth }),
+                        identifier: `${verification.identifier}-jazz-auth`,
+                        expiresAt: verification.expiresAt
                       }
-                    };
+                    );
                   }
                 }
               }
@@ -100,6 +97,7 @@ var jazzPlugin = () => {
           })
         },
         /**
+         * For: Social / OAuth2 plugin
          * /callback is the endpoint that BetterAuth uses to authenticate the user coming from a social provider.
          * 1. Catch the state
          * 2. Find the verification value
@@ -107,21 +105,14 @@ var jazzPlugin = () => {
          */
         {
           matcher: (context) => {
-            return context.path.startsWith("/callback");
+            return context.path.startsWith("/callback") || context.path.startsWith("/oauth2/callback");
           },
           handler: createAuthMiddleware(async (ctx) => {
             const state = ctx.query?.state || ctx.body?.state;
-            const data = await ctx.context.adapter.findOne({
-              model: ctx.context.tables.verification.modelName,
-              where: [
-                {
-                  field: "identifier",
-                  operator: "eq",
-                  value: state
-                }
-              ],
-              select: ["value"]
-            });
+            const identifier = `${state}-jazz-auth`;
+            const data = await ctx.context.internalAdapter.findVerificationValue(
+              identifier
+            );
             if (!data) {
               throw new APIError(404, {
                 message: "Verification not found"
@@ -129,13 +120,51 @@ var jazzPlugin = () => {
             }
             const parsed = JSON.parse(data.value);
             if (parsed && "jazzAuth" in parsed) {
-              ctx.context.jazzAuth = parsed.jazzAuth;
+              return {
+                context: {
+                  ...ctx,
+                  jazzAuth: parsed.jazzAuth
+                }
+              };
             } else {
               throw new APIError(404, {
                 message: "JazzAuth not found in verification value"
               });
             }
           })
+        },
+        /**
+         * For: Email OTP plugin
+         * When the user sends an OTP, we try to find the jazzAuth.
+         * If it isn't a sign-up, we expect to not find a verification value.
+         */
+        {
+          matcher: (context) => {
+            return context.path.startsWith("/sign-in/email-otp");
+          },
+          handler: createAuthMiddleware(async (ctx) => {
+            const email = ctx.body.email;
+            const identifier = `sign-in-otp-${email}-jazz-auth`;
+            const data = await ctx.context.internalAdapter.findVerificationValue(
+              identifier
+            );
+            if (!data || data.expiresAt < /* @__PURE__ */ new Date()) {
+              return;
+            }
+            const parsed = JSON.parse(data.value);
+            if (parsed && "jazzAuth" in parsed) {
+              return {
+                context: {
+                  ...ctx,
+                  jazzAuth: parsed.jazzAuth
+                }
+              };
+            } else {
+              throw new APIError(500, {
+                message: "JazzAuth not found in verification value"
+              });
+            }
+          })
         }
       ],
       after: [
@@ -161,6 +190,33 @@ var jazzPlugin = () => {
               jazzAuth
             });
           })
+        },
+        /**
+         * For: Social / OAuth2 plugin
+         * When the user sign-in via social, we create a verification value with the jazzAuth.
+         */
+        {
+          matcher: (context) => {
+            return context.path.startsWith("/sign-in/social");
+          },
+          handler: createAuthMiddleware(async (ctx) => {
+            if (!contextContainsJazzAuth(ctx)) {
+              throw new APIError(500, {
+                message: "JazzAuth not found in context"
+              });
+            }
+            const returned = ctx.context.returned;
+            const url = new URL(returned.url);
+            const state = url.searchParams.get("state");
+            const value = JSON.stringify({ jazzAuth: ctx.jazzAuth });
+            const expiresAt = /* @__PURE__ */ new Date();
+            expiresAt.setMinutes(expiresAt.getMinutes() + 10);
+            await ctx.context.internalAdapter.createVerificationValue({
+              value,
+              identifier: `${state}-jazz-auth`,
+              expiresAt
+            });
+          })
         }
       ]
     }

package/dist/better-auth/auth/server.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/better-auth/auth/server.ts"],"sourcesContent":["import { AuthContext, MiddlewareContext, MiddlewareOptions } from \"better-auth\";\nimport { APIError } from \"better-auth/api\";\nimport { symmetricDecrypt, symmetricEncrypt } from \"better-auth/crypto\";\nimport { BetterAuthPlugin, createAuthMiddleware } from \"better-auth/plugins\";\nimport type { Account, AuthCredentials, ID } from \"jazz-tools\";\n\n/**\n * @returns The BetterAuth server plugin.\n *\n * @example\n * ```ts\n * const auth = betterAuth({\n *   plugins: [jazzPlugin()],\n *   // ... other BetterAuth options\n * });\n * ```\n */\nexport const jazzPlugin = (): BetterAuthPlugin => {\n  return {\n    id: \"jazz-plugin\",\n    schema: {\n      user: {\n        fields: {\n          accountID: {\n            type: \"string\",\n            required: false,\n            input: false,\n          },\n          encryptedCredentials: {\n            type: \"string\",\n            required: false,\n            input: false,\n            returned: false,\n          },\n        },\n      },\n    },\n\n    init() {\n      return {\n        options: {\n          databaseHooks: {\n            user: {\n              create: {\n                before: async (user, context) => {\n                  // If the user is created without a jazzAuth, it will throw an error.\n                  if (!contextContainsJazzAuth(context)) {\n                    throw new APIError(422, {\n                      message: \"JazzAuth is required\",\n                    });\n                  }\n                  // Decorate the user with the jazz's credentials.\n                  return {\n                    data: {\n                      accountID: context?.jazzAuth?.accountID,\n                      encryptedCredentials:\n                        context?.jazzAuth?.encryptedCredentials,\n                    },\n                  };\n                },\n              },\n            },\n            verification: {\n              create: {\n                before: async (verification, context) => {\n                  // If a jazzAuth is provided, save it for later usage.\n                  if (contextContainsJazzAuth(context)) {\n                    const parsed = JSON.parse(verification.value);\n                    const newValue = JSON.stringify({\n                      ...parsed,\n                      jazzAuth: context.jazzAuth,\n                    });\n\n                    return {\n                      data: {\n                        value: newValue,\n                      },\n                    };\n                  }\n                },\n              },\n            },\n          },\n        },\n      };\n    },\n\n    hooks: {\n      before: [\n        /**\n         * If the client sends a x-jazz-auth header,\n         * we encrypt the credentials and inject them into the context.\n         */\n        {\n          matcher: (context) => {\n            return !!context.headers?.get(\"x-jazz-auth\");\n          },\n          handler: createAuthMiddleware(async (ctx) => {\n            const jazzAuth = JSON.parse(ctx.headers?.get(\"x-jazz-auth\")!);\n\n            const credentials: AuthCredentials = {\n              accountID: jazzAuth.accountID as ID<Account>,\n              secretSeed: jazzAuth.secretSeed,\n              accountSecret: jazzAuth.accountSecret as any,\n              // If the provider remains 'anonymous', Jazz will not consider us authenticated later.\n              provider: \"better-auth\",\n            };\n\n            const encryptedCredentials = await symmetricEncrypt({\n              key: ctx.context.secret,\n              data: JSON.stringify(credentials),\n            });\n\n            return {\n              context: {\n                ...ctx,\n                jazzAuth: {\n                  accountID: jazzAuth.accountID,\n                  encryptedCredentials: encryptedCredentials,\n                },\n              },\n            };\n          }),\n        },\n\n        /**\n         * /callback is the endpoint that BetterAuth uses to authenticate the user coming from a social provider.\n         * 1. Catch the state\n         * 2. Find the verification value\n         * 3. If the verification value contains a jazzAuth, inject into the context to have it in case of registration.\n         */\n        {\n          matcher: (context) => {\n            return context.path.startsWith(\"/callback\");\n          },\n          handler: createAuthMiddleware(async (ctx) => {\n            const state = ctx.query?.state || ctx.body?.state;\n\n            const data = await ctx.context.adapter.findOne<{ value: string }>({\n              model: ctx.context.tables.verification!.modelName,\n              where: [\n                {\n                  field: \"identifier\",\n                  operator: \"eq\",\n                  value: state,\n                },\n              ],\n              select: [\"value\"],\n            });\n\n            // if not found, the social plugin will throw later anyway\n            if (!data) {\n              throw new APIError(404, {\n                message: \"Verification not found\",\n              });\n            }\n\n            const parsed = JSON.parse(data.value);\n\n            if (parsed && \"jazzAuth\" in parsed) {\n              ctx.context.jazzAuth = parsed.jazzAuth;\n            } else {\n              throw new APIError(404, {\n                message: \"JazzAuth not found in verification value\",\n              });\n            }\n          }),\n        },\n      ],\n      after: [\n        /**\n         * This middleware is used to extract the jazzAuth from the user and return it in the response.\n         * It is used in the following endpoints that return the user:\n         * - /sign-up/email\n         * - /sign-in/email\n         * - /get-session\n         */\n        {\n          matcher: (context) => {\n            return (\n              context.path.startsWith(\"/sign-up\") ||\n              context.path.startsWith(\"/sign-in\") ||\n              context.path.startsWith(\"/get-session\")\n            );\n          },\n          handler: createAuthMiddleware({}, async (ctx) => {\n            const returned = ctx.context.returned as any;\n            if (!returned?.user?.id) {\n              return;\n            }\n            const jazzAuth = await extractJazzAuth(returned.user.id, ctx);\n\n            return ctx.json({\n              ...returned,\n              jazzAuth: jazzAuth,\n            });\n          }),\n        },\n      ],\n    },\n  };\n};\n\nfunction contextContainsJazzAuth(ctx: unknown): ctx is {\n  jazzAuth: {\n    accountID: string;\n    encryptedCredentials: string;\n  };\n} {\n  return !!ctx && typeof ctx === \"object\" && \"jazzAuth\" in ctx;\n}\n\nasync function extractJazzAuth(\n  userId: string,\n  ctx: MiddlewareContext<\n    MiddlewareOptions,\n    AuthContext & {\n      returned?: unknown;\n      responseHeaders?: Headers;\n    }\n  >,\n) {\n  const user = await ctx.context.adapter.findOne<{\n    accountID: string;\n    encryptedCredentials: string;\n  }>({\n    model: ctx.context.tables.user!.modelName,\n    where: [\n      {\n        field: \"id\",\n        operator: \"eq\",\n        value: userId,\n      },\n    ],\n    select: [\"accountID\", \"encryptedCredentials\"],\n  });\n\n  if (!user) {\n    return;\n  }\n\n  const jazzAuth = JSON.parse(\n    await symmetricDecrypt({\n      key: ctx.context.secret,\n      data: user.encryptedCredentials,\n    }),\n  );\n\n  return jazzAuth;\n}\n"],"mappings":";AACA,SAAS,gBAAgB;AACzB,SAAS,kBAAkB,wBAAwB;AACnD,SAA2B,4BAA4B;AAchD,IAAM,aAAa,MAAwB;AAChD,SAAO;AAAA,IACL,IAAI;AAAA,IACJ,QAAQ;AAAA,MACN,MAAM;AAAA,QACJ,QAAQ;AAAA,UACN,WAAW;AAAA,YACT,MAAM;AAAA,YACN,UAAU;AAAA,YACV,OAAO;AAAA,UACT;AAAA,UACA,sBAAsB;AAAA,YACpB,MAAM;AAAA,YACN,UAAU;AAAA,YACV,OAAO;AAAA,YACP,UAAU;AAAA,UACZ;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,IAEA,OAAO;AACL,aAAO;AAAA,QACL,SAAS;AAAA,UACP,eAAe;AAAA,YACb,MAAM;AAAA,cACJ,QAAQ;AAAA,gBACN,QAAQ,OAAO,MAAM,YAAY;AAE/B,sBAAI,CAAC,wBAAwB,OAAO,GAAG;AACrC,0BAAM,IAAI,SAAS,KAAK;AAAA,sBACtB,SAAS;AAAA,oBACX,CAAC;AAAA,kBACH;AAEA,yBAAO;AAAA,oBACL,MAAM;AAAA,sBACJ,WAAW,SAAS,UAAU;AAAA,sBAC9B,sBACE,SAAS,UAAU;AAAA,oBACvB;AAAA,kBACF;AAAA,gBACF;AAAA,cACF;AAAA,YACF;AAAA,YACA,cAAc;AAAA,cACZ,QAAQ;AAAA,gBACN,QAAQ,OAAO,cAAc,YAAY;AAEvC,sBAAI,wBAAwB,OAAO,GAAG;AACpC,0BAAM,SAAS,KAAK,MAAM,aAAa,KAAK;AAC5C,0BAAM,WAAW,KAAK,UAAU;AAAA,sBAC9B,GAAG;AAAA,sBACH,UAAU,QAAQ;AAAA,oBACpB,CAAC;AAED,2BAAO;AAAA,sBACL,MAAM;AAAA,wBACJ,OAAO;AAAA,sBACT;AAAA,oBACF;AAAA,kBACF;AAAA,gBACF;AAAA,cACF;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,IAEA,OAAO;AAAA,MACL,QAAQ;AAAA;AAAA;AAAA;AAAA;AAAA,QAKN;AAAA,UACE,SAAS,CAAC,YAAY;AACpB,mBAAO,CAAC,CAAC,QAAQ,SAAS,IAAI,aAAa;AAAA,UAC7C;AAAA,UACA,SAAS,qBAAqB,OAAO,QAAQ;AAC3C,kBAAM,WAAW,KAAK,MAAM,IAAI,SAAS,IAAI,aAAa,CAAE;AAE5D,kBAAM,cAA+B;AAAA,cACnC,WAAW,SAAS;AAAA,cACpB,YAAY,SAAS;AAAA,cACrB,eAAe,SAAS;AAAA;AAAA,cAExB,UAAU;AAAA,YACZ;AAEA,kBAAM,uBAAuB,MAAM,iBAAiB;AAAA,cAClD,KAAK,IAAI,QAAQ;AAAA,cACjB,MAAM,KAAK,UAAU,WAAW;AAAA,YAClC,CAAC;AAED,mBAAO;AAAA,cACL,SAAS;AAAA,gBACP,GAAG;AAAA,gBACH,UAAU;AAAA,kBACR,WAAW,SAAS;AAAA,kBACpB;AAAA,gBACF;AAAA,cACF;AAAA,YACF;AAAA,UACF,CAAC;AAAA,QACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,QAQA;AAAA,UACE,SAAS,CAAC,YAAY;AACpB,mBAAO,QAAQ,KAAK,WAAW,WAAW;AAAA,UAC5C;AAAA,UACA,SAAS,qBAAqB,OAAO,QAAQ;AAC3C,kBAAM,QAAQ,IAAI,OAAO,SAAS,IAAI,MAAM;AAE5C,kBAAM,OAAO,MAAM,IAAI,QAAQ,QAAQ,QAA2B;AAAA,cAChE,OAAO,IAAI,QAAQ,OAAO,aAAc;AAAA,cACxC,OAAO;AAAA,gBACL;AAAA,kBACE,OAAO;AAAA,kBACP,UAAU;AAAA,kBACV,OAAO;AAAA,gBACT;AAAA,cACF;AAAA,cACA,QAAQ,CAAC,OAAO;AAAA,YAClB,CAAC;AAGD,gBAAI,CAAC,MAAM;AACT,oBAAM,IAAI,SAAS,KAAK;AAAA,gBACtB,SAAS;AAAA,cACX,CAAC;AAAA,YACH;AAEA,kBAAM,SAAS,KAAK,MAAM,KAAK,KAAK;AAEpC,gBAAI,UAAU,cAAc,QAAQ;AAClC,kBAAI,QAAQ,WAAW,OAAO;AAAA,YAChC,OAAO;AACL,oBAAM,IAAI,SAAS,KAAK;AAAA,gBACtB,SAAS;AAAA,cACX,CAAC;AAAA,YACH;AAAA,UACF,CAAC;AAAA,QACH;AAAA,MACF;AAAA,MACA,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,QAQL;AAAA,UACE,SAAS,CAAC,YAAY;AACpB,mBACE,QAAQ,KAAK,WAAW,UAAU,KAClC,QAAQ,KAAK,WAAW,UAAU,KAClC,QAAQ,KAAK,WAAW,cAAc;AAAA,UAE1C;AAAA,UACA,SAAS,qBAAqB,CAAC,GAAG,OAAO,QAAQ;AAC/C,kBAAM,WAAW,IAAI,QAAQ;AAC7B,gBAAI,CAAC,UAAU,MAAM,IAAI;AACvB;AAAA,YACF;AACA,kBAAM,WAAW,MAAM,gBAAgB,SAAS,KAAK,IAAI,GAAG;AAE5D,mBAAO,IAAI,KAAK;AAAA,cACd,GAAG;AAAA,cACH;AAAA,YACF,CAAC;AAAA,UACH,CAAC;AAAA,QACH;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAEA,SAAS,wBAAwB,KAK/B;AACA,SAAO,CAAC,CAAC,OAAO,OAAO,QAAQ,YAAY,cAAc;AAC3D;AAEA,eAAe,gBACb,QACA,KAOA;AACA,QAAM,OAAO,MAAM,IAAI,QAAQ,QAAQ,QAGpC;AAAA,IACD,OAAO,IAAI,QAAQ,OAAO,KAAM;AAAA,IAChC,OAAO;AAAA,MACL;AAAA,QACE,OAAO;AAAA,QACP,UAAU;AAAA,QACV,OAAO;AAAA,MACT;AAAA,IACF;AAAA,IACA,QAAQ,CAAC,aAAa,sBAAsB;AAAA,EAC9C,CAAC;AAED,MAAI,CAAC,MAAM;AACT;AAAA,EACF;AAEA,QAAM,WAAW,KAAK;AAAA,IACpB,MAAM,iBAAiB;AAAA,MACrB,KAAK,IAAI,QAAQ;AAAA,MACjB,MAAM,KAAK;AAAA,IACb,CAAC;AAAA,EACH;AAEA,SAAO;AACT;","names":[]}
+{"version":3,"sources":["../../../src/better-auth/auth/server.ts"],"sourcesContent":["import { AuthContext, MiddlewareContext, MiddlewareOptions } from \"better-auth\";\nimport { APIError } from \"better-auth/api\";\nimport { symmetricDecrypt, symmetricEncrypt } from \"better-auth/crypto\";\nimport { BetterAuthPlugin, createAuthMiddleware } from \"better-auth/plugins\";\nimport type { Account, AuthCredentials, ID } from \"jazz-tools\";\n\n// Define a type to have user fields mapped in the better-auth instance\n// It should be automatic, but it needs an hard reference to BetterAuthPlugin type\n// in order to be exported as library.\ntype JazzPlugin = BetterAuthPlugin & {\n  schema: {\n    user: {\n      fields: {\n        accountID: {\n          type: \"string\";\n          required: false;\n          input: false;\n        };\n        encryptedCredentials: {\n          type: \"string\";\n          required: false;\n          input: false;\n          returned: false;\n        };\n      };\n    };\n  };\n};\n\n/**\n * @returns The BetterAuth server plugin.\n *\n * @example\n * ```ts\n * const auth = betterAuth({\n *   plugins: [jazzPlugin()],\n *   // ... other BetterAuth options\n * });\n * ```\n */\nexport const jazzPlugin: () => JazzPlugin = () => {\n  return {\n    id: \"jazz-plugin\",\n    schema: {\n      user: {\n        fields: {\n          accountID: {\n            type: \"string\",\n            required: false,\n            input: false,\n          },\n          encryptedCredentials: {\n            type: \"string\",\n            required: false,\n            input: false,\n            returned: false,\n          },\n        },\n      },\n    },\n\n    init() {\n      return {\n        options: {\n          databaseHooks: {\n            user: {\n              create: {\n                before: async (user, context) => {\n                  // If the user is created without a jazzAuth, it will throw an error.\n                  if (!contextContainsJazzAuth(context)) {\n                    throw new APIError(422, {\n                      message: \"JazzAuth is required on user creation\",\n                    });\n                  }\n                  // Decorate the user with the jazz's credentials.\n                  return {\n                    data: {\n                      accountID: context.jazzAuth.accountID,\n                      encryptedCredentials:\n                        context.jazzAuth.encryptedCredentials,\n                    },\n                  };\n                },\n              },\n            },\n            verification: {\n              create: {\n                after: async (verification, context) => {\n                  /**\n                   * For: Email OTP plugin\n                   * After a verification is created, if it is from the EmailOTP plugin,\n                   * create a new verification value with the jazzAuth with the same expiration.\n                   */\n                  if (\n                    contextContainsJazzAuth(context) &&\n                    verification.identifier.startsWith(\"sign-in-otp-\")\n                  ) {\n                    await context.context.internalAdapter.createVerificationValue(\n                      {\n                        value: JSON.stringify({ jazzAuth: context.jazzAuth }),\n                        identifier: `${verification.identifier}-jazz-auth`,\n                        expiresAt: verification.expiresAt,\n                      },\n                    );\n                  }\n                },\n              },\n            },\n          },\n        },\n      };\n    },\n\n    hooks: {\n      before: [\n        /**\n         * If the client sends a x-jazz-auth header,\n         * we encrypt the credentials and inject them into the context.\n         */\n        {\n          matcher: (context) => {\n            return !!context.headers?.get(\"x-jazz-auth\");\n          },\n          handler: createAuthMiddleware(async (ctx) => {\n            const jazzAuth = JSON.parse(ctx.headers?.get(\"x-jazz-auth\")!);\n\n            const credentials: AuthCredentials = {\n              accountID: jazzAuth.accountID as ID<Account>,\n              secretSeed: jazzAuth.secretSeed,\n              accountSecret: jazzAuth.accountSecret as any,\n              // If the provider remains 'anonymous', Jazz will not consider us authenticated later.\n              provider: \"better-auth\",\n            };\n\n            const encryptedCredentials = await symmetricEncrypt({\n              key: ctx.context.secret,\n              data: JSON.stringify(credentials),\n            });\n\n            return {\n              context: {\n                ...ctx,\n                jazzAuth: {\n                  accountID: jazzAuth.accountID,\n                  encryptedCredentials: encryptedCredentials,\n                },\n              },\n            };\n          }),\n        },\n\n        /**\n         * For: Social / OAuth2 plugin\n         * /callback is the endpoint that BetterAuth uses to authenticate the user coming from a social provider.\n         * 1. Catch the state\n         * 2. Find the verification value\n         * 3. If the verification value contains a jazzAuth, inject into the context to have it in case of registration.\n         */\n        {\n          matcher: (context) => {\n            return (\n              context.path.startsWith(\"/callback\") ||\n              context.path.startsWith(\"/oauth2/callback\")\n            );\n          },\n          handler: createAuthMiddleware(async (ctx) => {\n            const state = ctx.query?.state || ctx.body?.state;\n\n            const identifier = `${state}-jazz-auth`;\n\n            const data =\n              await ctx.context.internalAdapter.findVerificationValue(\n                identifier,\n              );\n\n            // if not found, the social plugin will throw later anyway\n            if (!data) {\n              throw new APIError(404, {\n                message: \"Verification not found\",\n              });\n            }\n\n            const parsed = JSON.parse(data.value);\n\n            if (parsed && \"jazzAuth\" in parsed) {\n              return {\n                context: {\n                  ...ctx,\n                  jazzAuth: parsed.jazzAuth,\n                },\n              };\n            } else {\n              throw new APIError(404, {\n                message: \"JazzAuth not found in verification value\",\n              });\n            }\n          }),\n        },\n        /**\n         * For: Email OTP plugin\n         * When the user sends an OTP, we try to find the jazzAuth.\n         * If it isn't a sign-up, we expect to not find a verification value.\n         */\n        {\n          matcher: (context) => {\n            return context.path.startsWith(\"/sign-in/email-otp\");\n          },\n          handler: createAuthMiddleware(async (ctx) => {\n            const email = ctx.body.email;\n            const identifier = `sign-in-otp-${email}-jazz-auth`;\n\n            const data =\n              await ctx.context.internalAdapter.findVerificationValue(\n                identifier,\n              );\n\n            // if not found, it isn't a sign-up\n            if (!data || data.expiresAt < new Date()) {\n              return;\n            }\n\n            const parsed = JSON.parse(data.value);\n\n            if (parsed && \"jazzAuth\" in parsed) {\n              return {\n                context: {\n                  ...ctx,\n                  jazzAuth: parsed.jazzAuth,\n                },\n              };\n            } else {\n              throw new APIError(500, {\n                message: \"JazzAuth not found in verification value\",\n              });\n            }\n          }),\n        },\n      ],\n      after: [\n        /**\n         * This middleware is used to extract the jazzAuth from the user and return it in the response.\n         * It is used in the following endpoints that return the user:\n         * - /sign-up/email\n         * - /sign-in/email\n         * - /get-session\n         */\n        {\n          matcher: (context) => {\n            return (\n              context.path.startsWith(\"/sign-up\") ||\n              context.path.startsWith(\"/sign-in\") ||\n              context.path.startsWith(\"/get-session\")\n            );\n          },\n          handler: createAuthMiddleware({}, async (ctx) => {\n            const returned = ctx.context.returned as any;\n            if (!returned?.user?.id) {\n              return;\n            }\n            const jazzAuth = await extractJazzAuth(returned.user.id, ctx);\n\n            return ctx.json({\n              ...returned,\n              jazzAuth: jazzAuth,\n            });\n          }),\n        },\n\n        /**\n         * For: Social / OAuth2 plugin\n         * When the user sign-in via social, we create a verification value with the jazzAuth.\n         */\n        {\n          matcher: (context) => {\n            return context.path.startsWith(\"/sign-in/social\");\n          },\n          handler: createAuthMiddleware(async (ctx) => {\n            if (!contextContainsJazzAuth(ctx)) {\n              throw new APIError(500, {\n                message: \"JazzAuth not found in context\",\n              });\n            }\n\n            const returned = ctx.context.returned as { url: string };\n\n            const url = new URL(returned.url);\n            const state = url.searchParams.get(\"state\");\n\n            const value = JSON.stringify({ jazzAuth: ctx.jazzAuth });\n            const expiresAt = new Date();\n            expiresAt.setMinutes(expiresAt.getMinutes() + 10);\n\n            await ctx.context.internalAdapter.createVerificationValue({\n              value,\n              identifier: `${state}-jazz-auth`,\n              expiresAt,\n            });\n          }),\n        },\n      ],\n    },\n  } satisfies JazzPlugin;\n};\n\nfunction contextContainsJazzAuth(ctx: unknown): ctx is {\n  jazzAuth: {\n    accountID: string;\n    encryptedCredentials: string;\n  };\n} {\n  return !!ctx && typeof ctx === \"object\" && \"jazzAuth\" in ctx;\n}\n\nasync function extractJazzAuth(\n  userId: string,\n  ctx: MiddlewareContext<\n    MiddlewareOptions,\n    AuthContext & {\n      returned?: unknown;\n      responseHeaders?: Headers;\n    }\n  >,\n) {\n  const user = await ctx.context.adapter.findOne<{\n    accountID: string;\n    encryptedCredentials: string;\n  }>({\n    model: ctx.context.tables.user!.modelName,\n    where: [\n      {\n        field: \"id\",\n        operator: \"eq\",\n        value: userId,\n      },\n    ],\n    select: [\"accountID\", \"encryptedCredentials\"],\n  });\n\n  if (!user) {\n    return;\n  }\n\n  const jazzAuth = JSON.parse(\n    await symmetricDecrypt({\n      key: ctx.context.secret,\n      data: user.encryptedCredentials,\n    }),\n  );\n\n  return jazzAuth;\n}\n"],"mappings":";AACA,SAAS,gBAAgB;AACzB,SAAS,kBAAkB,wBAAwB;AACnD,SAA2B,4BAA4B;AAqChD,IAAM,aAA+B,MAAM;AAChD,SAAO;AAAA,IACL,IAAI;AAAA,IACJ,QAAQ;AAAA,MACN,MAAM;AAAA,QACJ,QAAQ;AAAA,UACN,WAAW;AAAA,YACT,MAAM;AAAA,YACN,UAAU;AAAA,YACV,OAAO;AAAA,UACT;AAAA,UACA,sBAAsB;AAAA,YACpB,MAAM;AAAA,YACN,UAAU;AAAA,YACV,OAAO;AAAA,YACP,UAAU;AAAA,UACZ;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,IAEA,OAAO;AACL,aAAO;AAAA,QACL,SAAS;AAAA,UACP,eAAe;AAAA,YACb,MAAM;AAAA,cACJ,QAAQ;AAAA,gBACN,QAAQ,OAAO,MAAM,YAAY;AAE/B,sBAAI,CAAC,wBAAwB,OAAO,GAAG;AACrC,0BAAM,IAAI,SAAS,KAAK;AAAA,sBACtB,SAAS;AAAA,oBACX,CAAC;AAAA,kBACH;AAEA,yBAAO;AAAA,oBACL,MAAM;AAAA,sBACJ,WAAW,QAAQ,SAAS;AAAA,sBAC5B,sBACE,QAAQ,SAAS;AAAA,oBACrB;AAAA,kBACF;AAAA,gBACF;AAAA,cACF;AAAA,YACF;AAAA,YACA,cAAc;AAAA,cACZ,QAAQ;AAAA,gBACN,OAAO,OAAO,cAAc,YAAY;AAMtC,sBACE,wBAAwB,OAAO,KAC/B,aAAa,WAAW,WAAW,cAAc,GACjD;AACA,0BAAM,QAAQ,QAAQ,gBAAgB;AAAA,sBACpC;AAAA,wBACE,OAAO,KAAK,UAAU,EAAE,UAAU,QAAQ,SAAS,CAAC;AAAA,wBACpD,YAAY,GAAG,aAAa,UAAU;AAAA,wBACtC,WAAW,aAAa;AAAA,sBAC1B;AAAA,oBACF;AAAA,kBACF;AAAA,gBACF;AAAA,cACF;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,IAEA,OAAO;AAAA,MACL,QAAQ;AAAA;AAAA;AAAA;AAAA;AAAA,QAKN;AAAA,UACE,SAAS,CAAC,YAAY;AACpB,mBAAO,CAAC,CAAC,QAAQ,SAAS,IAAI,aAAa;AAAA,UAC7C;AAAA,UACA,SAAS,qBAAqB,OAAO,QAAQ;AAC3C,kBAAM,WAAW,KAAK,MAAM,IAAI,SAAS,IAAI,aAAa,CAAE;AAE5D,kBAAM,cAA+B;AAAA,cACnC,WAAW,SAAS;AAAA,cACpB,YAAY,SAAS;AAAA,cACrB,eAAe,SAAS;AAAA;AAAA,cAExB,UAAU;AAAA,YACZ;AAEA,kBAAM,uBAAuB,MAAM,iBAAiB;AAAA,cAClD,KAAK,IAAI,QAAQ;AAAA,cACjB,MAAM,KAAK,UAAU,WAAW;AAAA,YAClC,CAAC;AAED,mBAAO;AAAA,cACL,SAAS;AAAA,gBACP,GAAG;AAAA,gBACH,UAAU;AAAA,kBACR,WAAW,SAAS;AAAA,kBACpB;AAAA,gBACF;AAAA,cACF;AAAA,YACF;AAAA,UACF,CAAC;AAAA,QACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,QASA;AAAA,UACE,SAAS,CAAC,YAAY;AACpB,mBACE,QAAQ,KAAK,WAAW,WAAW,KACnC,QAAQ,KAAK,WAAW,kBAAkB;AAAA,UAE9C;AAAA,UACA,SAAS,qBAAqB,OAAO,QAAQ;AAC3C,kBAAM,QAAQ,IAAI,OAAO,SAAS,IAAI,MAAM;AAE5C,kBAAM,aAAa,GAAG,KAAK;AAE3B,kBAAM,OACJ,MAAM,IAAI,QAAQ,gBAAgB;AAAA,cAChC;AAAA,YACF;AAGF,gBAAI,CAAC,MAAM;AACT,oBAAM,IAAI,SAAS,KAAK;AAAA,gBACtB,SAAS;AAAA,cACX,CAAC;AAAA,YACH;AAEA,kBAAM,SAAS,KAAK,MAAM,KAAK,KAAK;AAEpC,gBAAI,UAAU,cAAc,QAAQ;AAClC,qBAAO;AAAA,gBACL,SAAS;AAAA,kBACP,GAAG;AAAA,kBACH,UAAU,OAAO;AAAA,gBACnB;AAAA,cACF;AAAA,YACF,OAAO;AACL,oBAAM,IAAI,SAAS,KAAK;AAAA,gBACtB,SAAS;AAAA,cACX,CAAC;AAAA,YACH;AAAA,UACF,CAAC;AAAA,QACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,QAMA;AAAA,UACE,SAAS,CAAC,YAAY;AACpB,mBAAO,QAAQ,KAAK,WAAW,oBAAoB;AAAA,UACrD;AAAA,UACA,SAAS,qBAAqB,OAAO,QAAQ;AAC3C,kBAAM,QAAQ,IAAI,KAAK;AACvB,kBAAM,aAAa,eAAe,KAAK;AAEvC,kBAAM,OACJ,MAAM,IAAI,QAAQ,gBAAgB;AAAA,cAChC;AAAA,YACF;AAGF,gBAAI,CAAC,QAAQ,KAAK,YAAY,oBAAI,KAAK,GAAG;AACxC;AAAA,YACF;AAEA,kBAAM,SAAS,KAAK,MAAM,KAAK,KAAK;AAEpC,gBAAI,UAAU,cAAc,QAAQ;AAClC,qBAAO;AAAA,gBACL,SAAS;AAAA,kBACP,GAAG;AAAA,kBACH,UAAU,OAAO;AAAA,gBACnB;AAAA,cACF;AAAA,YACF,OAAO;AACL,oBAAM,IAAI,SAAS,KAAK;AAAA,gBACtB,SAAS;AAAA,cACX,CAAC;AAAA,YACH;AAAA,UACF,CAAC;AAAA,QACH;AAAA,MACF;AAAA,MACA,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,QAQL;AAAA,UACE,SAAS,CAAC,YAAY;AACpB,mBACE,QAAQ,KAAK,WAAW,UAAU,KAClC,QAAQ,KAAK,WAAW,UAAU,KAClC,QAAQ,KAAK,WAAW,cAAc;AAAA,UAE1C;AAAA,UACA,SAAS,qBAAqB,CAAC,GAAG,OAAO,QAAQ;AAC/C,kBAAM,WAAW,IAAI,QAAQ;AAC7B,gBAAI,CAAC,UAAU,MAAM,IAAI;AACvB;AAAA,YACF;AACA,kBAAM,WAAW,MAAM,gBAAgB,SAAS,KAAK,IAAI,GAAG;AAE5D,mBAAO,IAAI,KAAK;AAAA,cACd,GAAG;AAAA,cACH;AAAA,YACF,CAAC;AAAA,UACH,CAAC;AAAA,QACH;AAAA;AAAA;AAAA;AAAA;AAAA,QAMA;AAAA,UACE,SAAS,CAAC,YAAY;AACpB,mBAAO,QAAQ,KAAK,WAAW,iBAAiB;AAAA,UAClD;AAAA,UACA,SAAS,qBAAqB,OAAO,QAAQ;AAC3C,gBAAI,CAAC,wBAAwB,GAAG,GAAG;AACjC,oBAAM,IAAI,SAAS,KAAK;AAAA,gBACtB,SAAS;AAAA,cACX,CAAC;AAAA,YACH;AAEA,kBAAM,WAAW,IAAI,QAAQ;AAE7B,kBAAM,MAAM,IAAI,IAAI,SAAS,GAAG;AAChC,kBAAM,QAAQ,IAAI,aAAa,IAAI,OAAO;AAE1C,kBAAM,QAAQ,KAAK,UAAU,EAAE,UAAU,IAAI,SAAS,CAAC;AACvD,kBAAM,YAAY,oBAAI,KAAK;AAC3B,sBAAU,WAAW,UAAU,WAAW,IAAI,EAAE;AAEhD,kBAAM,IAAI,QAAQ,gBAAgB,wBAAwB;AAAA,cACxD;AAAA,cACA,YAAY,GAAG,KAAK;AAAA,cACpB;AAAA,YACF,CAAC;AAAA,UACH,CAAC;AAAA,QACH;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAEA,SAAS,wBAAwB,KAK/B;AACA,SAAO,CAAC,CAAC,OAAO,OAAO,QAAQ,YAAY,cAAc;AAC3D;AAEA,eAAe,gBACb,QACA,KAOA;AACA,QAAM,OAAO,MAAM,IAAI,QAAQ,QAAQ,QAGpC;AAAA,IACD,OAAO,IAAI,QAAQ,OAAO,KAAM;AAAA,IAChC,OAAO;AAAA,MACL;AAAA,QACE,OAAO;AAAA,QACP,UAAU;AAAA,QACV,OAAO;AAAA,MACT;AAAA,IACF;AAAA,IACA,QAAQ,CAAC,aAAa,sBAAsB;AAAA,EAC9C,CAAC;AAED,MAAI,CAAC,MAAM;AACT;AAAA,EACF;AAEA,QAAM,WAAW,KAAK;AAAA,IACpB,MAAM,iBAAiB;AAAA,MACrB,KAAK,IAAI,QAAQ;AAAA,MACjB,MAAM,KAAK;AAAA,IACb,CAAC;AAAA,EACH;AAEA,SAAO;AACT;","names":[]}

package/dist/better-auth/auth/tests/react.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=react.test.d.ts.map

package/dist/better-auth/auth/tests/react.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"react.test.d.ts","sourceRoot":"","sources":["../../../../src/better-auth/auth/tests/react.test.tsx"],"names":[],"mappings":""}

package/dist/browser/createBrowserContext.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"createBrowserContext.d.ts","sourceRoot":"","sources":["../../src/browser/createBrowserContext.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAQ,YAAY,EAAE,MAAM,QAAQ,CAAC;AAIvD,OAAO,EACL,OAAO,EACP,YAAY,EACZ,OAAO,EACP,gBAAgB,EAChB,eAAe,EACf,iBAAiB,EACjB,OAAO,EACP,cAAc,EACd,cAAc,EACd,EAAE,EACF,YAAY,EACZ,eAAe,EACf,SAAS,EACT,UAAU,EAGX,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,aAAa,EAAqB,MAAM,qBAAqB,CAAC;AAKvE,MAAM,MAAM,yBAAyB,GAAG;IACtC,IAAI,EAAE,UAAU,CAAC;IACjB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,OAAO,CAAC,EAAE,aAAa,CAAC;IACxB,MAAM,CAAC,EAAE,cAAc,CAAC;IACxB,iBAAiB,EAAE,iBAAiB,CAAC;CACtC,CAAC;AA2EF,wBAAsB,6BAA6B,CACjD,OAAO,EAAE,yBAAyB;;;;;GA2BnC;AAED,MAAM,MAAM,qBAAqB,CAC/B,CAAC,SACG,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC,GACjD,gBAAgB,IAClB;IACF,WAAW,CAAC,EAAE,eAAe,CAAC;IAC9B,aAAa,CAAC,EAAE,CAAC,CAAC;IAClB,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B,GAAG,yBAAyB,CAAC;AAE9B,wBAAsB,wBAAwB,CAC5C,CAAC,SACG,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC,GACjD,gBAAgB,EACpB,OAAO,EAAE,qBAAqB,CAAC,CAAC,CAAC;;;;;;GAmDlC;AAED,+BAA+B;AAC/B,MAAM,MAAM,eAAe,GAAG,CAC5B,SAAS,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,OAAO,KAC7B,OAAO,CAAC,SAAS,CAAC,CAAC;AAExB,wBAAgB,yBAAyB,CACvC,SAAS,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,OAAO,EAChC,MAAM,EAAE,cAAc;;uBAEE,IAAI;GA8C7B;AAED,6BAA6B;AAC7B,wBAAgB,gBAAgB,CAAC,CAAC,SAAS,OAAO,EAChD,KAAK,EAAE,CAAC,EACR,IAAI,EAAE,QAAQ,GAAG,QAAQ,GAAG,OAAO,GAAG,WAAW,EAEjD,EACE,OAAkD,EAClD,SAAS,GACV,GAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GAC/C,MAAM,CAoBR;AAED,6BAA6B;AAC7B,wBAAgB,eAAe,CAAC,CAAC,SAAS,OAAO,EAC/C,SAAS,EAAE,MAAM,GAEf;IACE,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,YAAY,CAAC;CAC5B,GACD,SAAS,CAuBZ"}
+{"version":3,"file":"createBrowserContext.d.ts","sourceRoot":"","sources":["../../src/browser/createBrowserContext.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAQ,YAAY,EAAE,MAAM,QAAQ,CAAC;AAIvD,OAAO,EACL,OAAO,EACP,YAAY,EACZ,OAAO,EACP,gBAAgB,EAChB,eAAe,EACf,iBAAiB,EACjB,OAAO,EACP,cAAc,EACd,cAAc,EACd,EAAE,EACF,YAAY,EACZ,eAAe,EACf,SAAS,EACT,UAAU,EAGX,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,aAAa,EAAqB,MAAM,qBAAqB,CAAC;AAKvE,MAAM,MAAM,yBAAyB,GAAG;IACtC,IAAI,EAAE,UAAU,CAAC;IACjB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,OAAO,CAAC,EAAE,aAAa,CAAC;IACxB,MAAM,CAAC,EAAE,cAAc,CAAC;IACxB,iBAAiB,EAAE,iBAAiB,CAAC;CACtC,CAAC;AA2EF,wBAAsB,6BAA6B,CACjD,OAAO,EAAE,yBAAyB;;;;;GA2BnC;AAED,MAAM,MAAM,qBAAqB,CAC/B,CAAC,SACG,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC,GACjD,gBAAgB,IAClB;IACF,WAAW,CAAC,EAAE,eAAe,CAAC;IAC9B,aAAa,CAAC,EAAE,CAAC,CAAC;IAClB,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B,GAAG,yBAAyB,CAAC;AAE9B,wBAAsB,wBAAwB,CAC5C,CAAC,SACG,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC,GACjD,gBAAgB,EACpB,OAAO,EAAE,qBAAqB,CAAC,CAAC,CAAC;;;;;;GAmDlC;AAED,+BAA+B;AAC/B,MAAM,MAAM,eAAe,GAAG,CAC5B,SAAS,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,OAAO,KAC7B,OAAO,CAAC,SAAS,CAAC,CAAC;AAExB,wBAAgB,yBAAyB,CACvC,SAAS,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,OAAO,EAChC,MAAM,EAAE,cAAc;;;GAwDvB;AAED,6BAA6B;AAC7B,wBAAgB,gBAAgB,CAAC,CAAC,SAAS,OAAO,EAChD,KAAK,EAAE,CAAC,EACR,IAAI,EAAE,QAAQ,GAAG,QAAQ,GAAG,OAAO,GAAG,WAAW,EAEjD,EACE,OAAkD,EAClD,SAAS,GACV,GAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GAC/C,MAAM,CAoBR;AAED,6BAA6B;AAC7B,wBAAgB,eAAe,CAAC,CAAC,SAAS,OAAO,EAC/C,SAAS,EAAE,MAAM,GAEf;IACE,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,YAAY,CAAC;CAC5B,GACD,SAAS,CAuBZ"}

package/dist/browser/index.js

@@ -330,6 +330,13 @@ async function createJazzBrowserContext(options) {
   };
 }
 function provideBrowserLockSession(accountID, crypto) {
+  if (typeof navigator === "undefined" || !navigator.locks?.request) {
+    return Promise.resolve({
+      sessionID: crypto.newRandomSessionID(accountID),
+      sessionDone: () => {
+      }
+    });
+  }
   let sessionDone;
   const donePromise = new Promise((resolve) => {
     sessionDone = resolve;

package/dist/browser/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/browser/index.ts","../../src/browser/utils/export-account-inspector.ts","../../src/browser/auth/PasskeyAuth.ts","../../src/browser/createBrowserContext.ts","../../src/browser/storageOptions.ts","../../src/browser/BrowserContextManager.ts","../../src/browser/auth/LocalStorageKVStore.ts"],"sourcesContent":["import {\n  Account,\n  CoValue,\n  CoValueClassOrSchema,\n  InviteSecret,\n  createInviteLink as baseCreateInviteLink,\n  consumeInviteLink,\n} from \"jazz-tools\";\nimport { setupInspector } from \"./utils/export-account-inspector.js\";\nexport { BrowserPasskeyAuth } from \"./auth/PasskeyAuth.js\";\n\nsetupInspector();\n\nexport * from \"./createBrowserContext.js\";\nexport * from \"./BrowserContextManager.js\";\n\nexport { LocalStorageKVStore } from \"./auth/LocalStorageKVStore.js\";\n\n/** @category Invite Links */\nexport function createInviteLink<C extends CoValue>(\n  value: C,\n  role: \"reader\" | \"writer\" | \"admin\" | \"writeOnly\",\n  // default to same address as window.location, but without hash\n  {\n    baseURL = window.location.href.replace(/#.*$/, \"\"),\n    valueHint,\n  }: { baseURL?: string; valueHint?: string } = {},\n): string {\n  return baseCreateInviteLink(value, role, baseURL, valueHint);\n}\n\n/** @category Invite Links */\nexport { parseInviteLink } from \"jazz-tools\";\n\n/** @category Invite Links */\nexport async function consumeInviteLinkFromWindowLocation<\n  S extends CoValueClassOrSchema,\n>({\n  as,\n  forValueHint,\n  invitedObjectSchema,\n}: {\n  as?: Account;\n  forValueHint?: string;\n  invitedObjectSchema: S;\n}): Promise<\n  | {\n      valueID: string;\n      valueHint?: string;\n      inviteSecret: InviteSecret;\n    }\n  | undefined\n> {\n  const result = await consumeInviteLink({\n    inviteURL: window.location.href,\n    as,\n    forValueHint,\n    invitedObjectSchema,\n  });\n\n  if (result) {\n    window.history.replaceState(\n      {},\n      \"\",\n      window.location.href.replace(/#.*$/, \"\"),\n    );\n  }\n\n  return result;\n}\n","import { AuthSecretStorage } from \"jazz-tools\";\n\nasync function exportAccountToInspector() {\n  const authSecretStorage = new AuthSecretStorage();\n  const localStorageData = await authSecretStorage.get();\n\n  if (!localStorageData) {\n    console.error(\"No account data found in localStorage\");\n    return;\n  }\n\n  const encodedAccountSecret = btoa(localStorageData.accountSecret);\n  window.open(\n    new URL(\n      `#/import/${localStorageData?.accountID}/${encodedAccountSecret}`,\n      \"https://inspector.jazz.tools\",\n    ).toString(),\n    \"_blank\",\n  );\n}\n\nfunction listenForCmdJ() {\n  if (typeof window === \"undefined\") return;\n\n  const cb = (e: any) => {\n    if (e.metaKey && e.key === \"j\") {\n      if (\n        confirm(\n          \"Are you sure you want to inspect your account using inspector.jazz.tools? This lets anyone with the secret inspector URL read your data and impersonate you.\",\n        )\n      ) {\n        exportAccountToInspector();\n      }\n    }\n  };\n\n  window.addEventListener(\"keydown\", cb);\n\n  return () => {\n    window.removeEventListener(\"keydown\", cb);\n  };\n}\n\n/**\n * Automatically sets up the Cmd+J listener if 'allowJazzInspector' is present in the URL\n * @returns A cleanup function if the listener was set up, undefined otherwise\n */\nexport function setupInspector() {\n  if (typeof window === \"undefined\") return;\n\n  const url = new URL(window.location.href);\n  if (\n    url.hash.includes(\"allowJazzInspector\") ||\n    process.env.NODE_ENV === \"development\"\n  ) {\n    return listenForCmdJ();\n  }\n}\n","import { CryptoProvider, RawAccountID, cojsonInternals } from \"cojson\";\nimport {\n  Account,\n  AuthSecretStorage,\n  AuthenticateAccountFunction,\n  ID,\n} from \"jazz-tools\";\n\n/**\n * `BrowserPasskeyAuth` provides a `JazzAuth` object for passkey authentication.\n *\n * ```ts\n * import { BrowserPasskeyAuth } from \"jazz-tools/browser\";\n *\n * const auth = new BrowserPasskeyAuth(driver, appName);\n * ```\n *\n * @category Auth Providers\n */\nexport class BrowserPasskeyAuth {\n  constructor(\n    protected crypto: CryptoProvider,\n    protected authenticate: AuthenticateAccountFunction,\n    protected authSecretStorage: AuthSecretStorage,\n    public appName: string,\n    public appHostname: string = window.location.hostname,\n  ) {}\n\n  static readonly id = \"passkey\";\n\n  logIn = async () => {\n    const { crypto, authenticate } = this;\n\n    const webAuthNCredential = await this.getPasskeyCredentials();\n\n    if (!webAuthNCredential) {\n      return;\n    }\n\n    const webAuthNCredentialPayload = new Uint8Array(\n      webAuthNCredential.response.userHandle,\n    );\n    const accountSecretSeed = webAuthNCredentialPayload.slice(\n      0,\n      cojsonInternals.secretSeedLength,\n    );\n\n    const secret = crypto.agentSecretFromSecretSeed(accountSecretSeed);\n\n    const accountID = cojsonInternals.rawCoIDfromBytes(\n      webAuthNCredentialPayload.slice(\n        cojsonInternals.secretSeedLength,\n        cojsonInternals.secretSeedLength + cojsonInternals.shortHashLength,\n      ),\n    ) as ID<Account>;\n\n    await authenticate({\n      accountID,\n      accountSecret: secret,\n    });\n\n    await this.authSecretStorage.set({\n      accountID,\n      secretSeed: accountSecretSeed,\n      accountSecret: secret,\n      provider: \"passkey\",\n    });\n  };\n\n  signUp = async (username: string) => {\n    const credentials = await this.authSecretStorage.get();\n\n    if (!credentials?.secretSeed) {\n      throw new Error(\n        \"Not enough credentials to register the account with passkey\",\n      );\n    }\n\n    await this.createPasskeyCredentials({\n      accountID: credentials.accountID,\n      secretSeed: credentials.secretSeed,\n      username,\n    });\n\n    const currentAccount = await Account.getMe().$jazz.ensureLoaded({\n      resolve: {\n        profile: true,\n      },\n    });\n\n    if (username.trim().length !== 0) {\n      currentAccount.profile.$jazz.set(\"name\", username);\n    }\n\n    await this.authSecretStorage.set({\n      accountID: credentials.accountID,\n      secretSeed: credentials.secretSeed,\n      accountSecret: credentials.accountSecret,\n      provider: \"passkey\",\n    });\n  };\n\n  private async createPasskeyCredentials({\n    accountID,\n    secretSeed,\n    username,\n  }: {\n    accountID: ID<Account>;\n    secretSeed: Uint8Array;\n    username: string;\n  }) {\n    const webAuthNCredentialPayload = new Uint8Array(\n      cojsonInternals.secretSeedLength + cojsonInternals.shortHashLength,\n    );\n\n    webAuthNCredentialPayload.set(secretSeed);\n    webAuthNCredentialPayload.set(\n      cojsonInternals.rawCoIDtoBytes(accountID as unknown as RawAccountID),\n      cojsonInternals.secretSeedLength,\n    );\n\n    try {\n      await navigator.credentials.create({\n        publicKey: {\n          challenge: this.crypto.randomBytes(20),\n          rp: {\n            name: this.appName,\n            id: this.appHostname,\n          },\n          user: {\n            id: webAuthNCredentialPayload,\n            name: username + ` (${new Date().toLocaleString()})`,\n            displayName: username,\n          },\n          pubKeyCredParams: [\n            { alg: -7, type: \"public-key\" },\n            { alg: -8, type: \"public-key\" },\n            { alg: -37, type: \"public-key\" },\n            { alg: -257, type: \"public-key\" },\n          ],\n          authenticatorSelection: {\n            requireResidentKey: true,\n            residentKey: \"required\",\n            userVerification: \"preferred\",\n          },\n          timeout: 60000,\n          attestation: \"direct\",\n        },\n      });\n    } catch (error) {\n      throw new Error(\"Passkey creation aborted\", { cause: error });\n    }\n  }\n\n  private async getPasskeyCredentials() {\n    try {\n      const value = await navigator.credentials.get({\n        publicKey: {\n          challenge: Uint8Array.from([0, 1, 2]),\n          rpId: this.appHostname,\n          allowCredentials: [],\n          timeout: 60000,\n          userVerification: \"preferred\",\n        },\n        mediation: \"optional\",\n      });\n\n      return value as\n        | (Credential & { response: { userHandle: ArrayBuffer } })\n        | null;\n    } catch (error) {\n      throw new Error(\"Passkey creation aborted\", { cause: error });\n    }\n  }\n}\n","import { LocalNode, Peer, RawAccountID } from \"cojson\";\nimport { getIndexedDBStorage } from \"cojson-storage-indexeddb\";\nimport { WebSocketPeerWithReconnection } from \"cojson-transport-ws\";\nimport { WasmCrypto } from \"cojson/crypto/WasmCrypto\";\nimport {\n  Account,\n  AccountClass,\n  AgentID,\n  AnyAccountSchema,\n  AuthCredentials,\n  AuthSecretStorage,\n  CoValue,\n  CoValueFromRaw,\n  CryptoProvider,\n  ID,\n  InviteSecret,\n  NewAccountProps,\n  SessionID,\n  SyncConfig,\n  cojsonInternals,\n  createAnonymousJazzContext,\n} from \"jazz-tools\";\nimport { createJazzContext } from \"jazz-tools\";\nimport { StorageConfig, getStorageOptions } from \"./storageOptions.js\";\nimport { setupInspector } from \"./utils/export-account-inspector.js\";\n\nsetupInspector();\n\nexport type BaseBrowserContextOptions = {\n  sync: SyncConfig;\n  reconnectionTimeout?: number;\n  storage?: StorageConfig;\n  crypto?: CryptoProvider;\n  authSecretStorage: AuthSecretStorage;\n};\n\nclass BrowserWebSocketPeerWithReconnection extends WebSocketPeerWithReconnection {\n  onNetworkChange(callback: (connected: boolean) => void): () => void {\n    const handler = () => callback(navigator.onLine);\n    window.addEventListener(\"online\", handler);\n    window.addEventListener(\"offline\", handler);\n\n    return () => {\n      window.removeEventListener(\"online\", handler);\n      window.removeEventListener(\"offline\", handler);\n    };\n  }\n}\n\nasync function setupPeers(options: BaseBrowserContextOptions) {\n  const crypto = options.crypto || (await WasmCrypto.create());\n  let node: LocalNode | undefined = undefined;\n\n  const { useIndexedDB } = getStorageOptions(options.storage);\n\n  const peersToLoadFrom: Peer[] = [];\n\n  const storage = useIndexedDB ? await getIndexedDBStorage() : undefined;\n\n  if (options.sync.when === \"never\") {\n    return {\n      toggleNetwork: () => {},\n      peersToLoadFrom,\n      storage,\n      setNode: () => {},\n      crypto,\n    };\n  }\n\n  const wsPeer = new BrowserWebSocketPeerWithReconnection({\n    peer: options.sync.peer,\n    reconnectionTimeout: options.reconnectionTimeout,\n    addPeer: (peer) => {\n      if (node) {\n        node.syncManager.addPeer(peer);\n      } else {\n        peersToLoadFrom.push(peer);\n      }\n    },\n    removePeer: (peer) => {\n      peersToLoadFrom.splice(peersToLoadFrom.indexOf(peer), 1);\n    },\n  });\n\n  function toggleNetwork(enabled: boolean) {\n    if (enabled) {\n      wsPeer.enable();\n    } else {\n      wsPeer.disable();\n    }\n  }\n\n  function setNode(value: LocalNode) {\n    node = value;\n  }\n\n  if (options.sync.when === \"always\" || !options.sync.when) {\n    toggleNetwork(true);\n  }\n\n  return {\n    toggleNetwork,\n    peersToLoadFrom,\n    storage,\n    setNode,\n    crypto,\n  };\n}\n\nexport async function createJazzBrowserGuestContext(\n  options: BaseBrowserContextOptions,\n) {\n  const { toggleNetwork, peersToLoadFrom, setNode, crypto, storage } =\n    await setupPeers(options);\n\n  const context = await createAnonymousJazzContext({\n    crypto,\n    peersToLoadFrom,\n    storage,\n  });\n\n  setNode(context.agent.node);\n\n  options.authSecretStorage.emitUpdate(null);\n\n  return {\n    guest: context.agent,\n    node: context.agent.node,\n    done: () => {\n      // TODO: Sync all the covalues before closing the connection & context\n      toggleNetwork(false);\n      context.done();\n    },\n    logOut: () => {\n      return context.logOut();\n    },\n  };\n}\n\nexport type BrowserContextOptions<\n  S extends\n    | (AccountClass<Account> & CoValueFromRaw<Account>)\n    | AnyAccountSchema,\n> = {\n  credentials?: AuthCredentials;\n  AccountSchema?: S;\n  newAccountProps?: NewAccountProps;\n  defaultProfileName?: string;\n} & BaseBrowserContextOptions;\n\nexport async function createJazzBrowserContext<\n  S extends\n    | (AccountClass<Account> & CoValueFromRaw<Account>)\n    | AnyAccountSchema,\n>(options: BrowserContextOptions<S>) {\n  const { toggleNetwork, peersToLoadFrom, setNode, crypto, storage } =\n    await setupPeers(options);\n\n  let unsubscribeAuthUpdate = () => {};\n\n  if (options.sync.when === \"signedUp\") {\n    const authSecretStorage = options.authSecretStorage;\n    const credentials = options.credentials ?? (await authSecretStorage.get());\n\n    function handleAuthUpdate(isAuthenticated: boolean) {\n      if (isAuthenticated) {\n        toggleNetwork(true);\n      } else {\n        toggleNetwork(false);\n      }\n    }\n\n    unsubscribeAuthUpdate = authSecretStorage.onUpdate(handleAuthUpdate);\n    handleAuthUpdate(authSecretStorage.getIsAuthenticated(credentials));\n  }\n\n  const context = await createJazzContext({\n    credentials: options.credentials,\n    newAccountProps: options.newAccountProps,\n    peersToLoadFrom,\n    storage,\n    crypto,\n    defaultProfileName: options.defaultProfileName,\n    AccountSchema: options.AccountSchema,\n    sessionProvider: provideBrowserLockSession,\n    authSecretStorage: options.authSecretStorage,\n  });\n\n  setNode(context.node);\n\n  return {\n    me: context.account,\n    node: context.node,\n    authSecretStorage: context.authSecretStorage,\n    done: () => {\n      // TODO: Sync all the covalues before closing the connection & context\n      toggleNetwork(false);\n      unsubscribeAuthUpdate();\n      context.done();\n    },\n    logOut: () => {\n      unsubscribeAuthUpdate();\n      return context.logOut();\n    },\n  };\n}\n\n/** @category Auth Providers */\nexport type SessionProvider = (\n  accountID: ID<Account> | AgentID,\n) => Promise<SessionID>;\n\nexport function provideBrowserLockSession(\n  accountID: ID<Account> | AgentID,\n  crypto: CryptoProvider,\n) {\n  let sessionDone!: () => void;\n  const donePromise = new Promise<void>((resolve) => {\n    sessionDone = resolve;\n  });\n\n  let resolveSession: (sessionID: SessionID) => void;\n  const sessionPromise = new Promise<SessionID>((resolve) => {\n    resolveSession = resolve;\n  });\n\n  void (async function () {\n    for (let idx = 0; idx < 100; idx++) {\n      // To work better around StrictMode\n      for (let retry = 0; retry < 2; retry++) {\n        // console.debug(\"Trying to get lock\", accountID + \"_\" + idx);\n        const sessionFinishedOrNoLock = await navigator.locks.request(\n          accountID + \"_\" + idx,\n          { ifAvailable: true },\n          async (lock) => {\n            if (!lock) return \"noLock\";\n\n            const sessionID =\n              localStorage.getItem(accountID + \"_\" + idx) ||\n              crypto.newRandomSessionID(accountID as RawAccountID | AgentID);\n            localStorage.setItem(accountID + \"_\" + idx, sessionID);\n\n            resolveSession(sessionID as SessionID);\n\n            await donePromise;\n            console.log(\"Done with lock\", accountID + \"_\" + idx, sessionID);\n            return \"sessionFinished\";\n          },\n        );\n\n        if (sessionFinishedOrNoLock === \"sessionFinished\") {\n          return;\n        }\n      }\n    }\n    throw new Error(\"Couldn't get lock on session after 100x2 tries\");\n  })();\n\n  return sessionPromise.then((sessionID) => ({\n    sessionID,\n    sessionDone,\n  }));\n}\n\n/** @category Invite Links */\nexport function createInviteLink<C extends CoValue>(\n  value: C,\n  role: \"reader\" | \"writer\" | \"admin\" | \"writeOnly\",\n  // default to same address as window.location, but without hash\n  {\n    baseURL = window.location.href.replace(/#.*$/, \"\"),\n    valueHint,\n  }: { baseURL?: string; valueHint?: string } = {},\n): string {\n  const coValueCore = value.$jazz.raw.core;\n  let currentCoValue = coValueCore;\n\n  while (currentCoValue.verified.header.ruleset.type === \"ownedByGroup\") {\n    currentCoValue = currentCoValue.getGroup().core;\n  }\n\n  const { ruleset, meta } = currentCoValue.verified.header;\n\n  if (ruleset.type !== \"group\" || meta?.type === \"account\") {\n    throw new Error(\"Can't create invite link for object without group\");\n  }\n\n  const group = cojsonInternals.expectGroup(currentCoValue.getCurrentContent());\n  const inviteSecret = group.createInvite(role);\n\n  return `${baseURL}#/invite/${valueHint ? valueHint + \"/\" : \"\"}${\n    value.$jazz.id\n  }/${inviteSecret}`;\n}\n\n/** @category Invite Links */\nexport function parseInviteLink<C extends CoValue>(\n  inviteURL: string,\n):\n  | {\n      valueID: ID<C>;\n      valueHint?: string;\n      inviteSecret: InviteSecret;\n    }\n  | undefined {\n  const url = new URL(inviteURL);\n  const parts = url.hash.split(\"/\");\n\n  let valueHint: string | undefined;\n  let valueID: ID<C> | undefined;\n  let inviteSecret: InviteSecret | undefined;\n\n  if (parts[0] === \"#\" && parts[1] === \"invite\") {\n    if (parts.length === 5) {\n      valueHint = parts[2];\n      valueID = parts[3] as ID<C>;\n      inviteSecret = parts[4] as InviteSecret;\n    } else if (parts.length === 4) {\n      valueID = parts[2] as ID<C>;\n      inviteSecret = parts[3] as InviteSecret;\n    }\n\n    if (!valueID || !inviteSecret) {\n      return undefined;\n    }\n    return { valueID, inviteSecret, valueHint };\n  }\n}\n","type StorageOption = \"indexedDB\";\ntype CombinedStorageOption = [\"indexedDB\"];\nexport type StorageConfig =\n  | StorageOption\n  | CombinedStorageOption\n  | [StorageOption];\n\nexport function getStorageOptions(storage?: StorageConfig): {\n  useIndexedDB: boolean;\n} {\n  const useIndexedDB =\n    !storage ||\n    (Array.isArray(storage) && storage.includes(\"indexedDB\")) ||\n    storage === \"indexedDB\";\n\n  return { useIndexedDB };\n}\n","import {\n  Account,\n  AccountClass,\n  AnyAccountSchema,\n  CoValueFromRaw,\n  InMemoryKVStore,\n  InstanceOfSchema,\n  JazzContextManager,\n  SyncConfig,\n} from \"jazz-tools\";\nimport { JazzContextManagerAuthProps } from \"jazz-tools\";\nimport { LocalStorageKVStore } from \"./auth/LocalStorageKVStore.js\";\nimport {\n  BaseBrowserContextOptions,\n  createJazzBrowserContext,\n  createJazzBrowserGuestContext,\n} from \"./createBrowserContext.js\";\n\nexport type JazzContextManagerProps<\n  S extends\n    | (AccountClass<Account> & CoValueFromRaw<Account>)\n    | AnyAccountSchema,\n> = {\n  guestMode?: boolean;\n  sync: SyncConfig;\n  onLogOut?: () => void;\n  logOutReplacement?: () => void;\n  onAnonymousAccountDiscarded?: (\n    anonymousAccount: InstanceOfSchema<S>,\n  ) => Promise<void>;\n  storage?: BaseBrowserContextOptions[\"storage\"];\n  AccountSchema?: S;\n  defaultProfileName?: string;\n};\n\nexport class JazzBrowserContextManager<\n  S extends\n    | (AccountClass<Account> & CoValueFromRaw<Account>)\n    | AnyAccountSchema,\n> extends JazzContextManager<InstanceOfSchema<S>, JazzContextManagerProps<S>> {\n  // TODO: When the storage changes, if the user is changed, update the context\n  getKvStore() {\n    if (typeof window === \"undefined\") {\n      // To handle running in SSR\n      return new InMemoryKVStore();\n    } else {\n      return new LocalStorageKVStore();\n    }\n  }\n\n  async getNewContext(\n    props: JazzContextManagerProps<S>,\n    authProps?: JazzContextManagerAuthProps,\n  ) {\n    if (props.guestMode) {\n      return createJazzBrowserGuestContext({\n        sync: props.sync,\n        storage: props.storage,\n        authSecretStorage: this.authSecretStorage,\n      });\n    } else {\n      return createJazzBrowserContext<S>({\n        sync: props.sync,\n        storage: props.storage,\n        AccountSchema: props.AccountSchema,\n        credentials: authProps?.credentials,\n        newAccountProps: authProps?.newAccountProps,\n        defaultProfileName: props.defaultProfileName,\n        authSecretStorage: this.authSecretStorage,\n      });\n    }\n  }\n\n  propsChanged(props: JazzContextManagerProps<S>) {\n    if (!this.props) {\n      return true;\n    }\n\n    return (\n      this.props.sync.when !== props.sync.when ||\n      this.props.sync.peer !== props.sync.peer ||\n      this.props.guestMode !== props.guestMode\n    );\n  }\n}\n","import { KvStore } from \"jazz-tools\";\n\nexport class LocalStorageKVStore implements KvStore {\n  constructor() {}\n\n  async get(key: string) {\n    return localStorage.getItem(key);\n  }\n\n  async set(key: string, value: string) {\n    localStorage.setItem(key, value);\n  }\n\n  async delete(key: string) {\n    localStorage.removeItem(key);\n  }\n\n  async clearAll() {\n    localStorage.clear();\n  }\n}\n"],"mappings":";AAAA;AAAA,EAKE,oBAAoB;AAAA,EACpB;AAAA,OACK;;;ACPP,SAAS,yBAAyB;AAElC,eAAe,2BAA2B;AACxC,QAAM,oBAAoB,IAAI,kBAAkB;AAChD,QAAM,mBAAmB,MAAM,kBAAkB,IAAI;AAErD,MAAI,CAAC,kBAAkB;AACrB,YAAQ,MAAM,uCAAuC;AACrD;AAAA,EACF;AAEA,QAAM,uBAAuB,KAAK,iBAAiB,aAAa;AAChE,SAAO;AAAA,IACL,IAAI;AAAA,MACF,YAAY,kBAAkB,SAAS,IAAI,oBAAoB;AAAA,MAC/D;AAAA,IACF,EAAE,SAAS;AAAA,IACX;AAAA,EACF;AACF;AAEA,SAAS,gBAAgB;AACvB,MAAI,OAAO,WAAW,YAAa;AAEnC,QAAM,KAAK,CAAC,MAAW;AACrB,QAAI,EAAE,WAAW,EAAE,QAAQ,KAAK;AAC9B,UACE;AAAA,QACE;AAAA,MACF,GACA;AACA,iCAAyB;AAAA,MAC3B;AAAA,IACF;AAAA,EACF;AAEA,SAAO,iBAAiB,WAAW,EAAE;AAErC,SAAO,MAAM;AACX,WAAO,oBAAoB,WAAW,EAAE;AAAA,EAC1C;AACF;AAMO,SAAS,iBAAiB;AAC/B,MAAI,OAAO,WAAW,YAAa;AAEnC,QAAM,MAAM,IAAI,IAAI,OAAO,SAAS,IAAI;AACxC,MACE,IAAI,KAAK,SAAS,oBAAoB,KACtC,QAAQ,IAAI,aAAa,eACzB;AACA,WAAO,cAAc;AAAA,EACvB;AACF;;;ACzDA,SAAuC,uBAAuB;AAC9D;AAAA,EACE;AAAA,OAIK;AAaA,IAAM,qBAAN,MAAyB;AAAA,EAC9B,YACY,QACA,cACA,mBACH,SACA,cAAsB,OAAO,SAAS,UAC7C;AALU;AACA;AACA;AACH;AACA;AAKT,iBAAQ,YAAY;AAClB,YAAM,EAAE,QAAQ,aAAa,IAAI;AAEjC,YAAM,qBAAqB,MAAM,KAAK,sBAAsB;AAE5D,UAAI,CAAC,oBAAoB;AACvB;AAAA,MACF;AAEA,YAAM,4BAA4B,IAAI;AAAA,QACpC,mBAAmB,SAAS;AAAA,MAC9B;AACA,YAAM,oBAAoB,0BAA0B;AAAA,QAClD;AAAA,QACA,gBAAgB;AAAA,MAClB;AAEA,YAAM,SAAS,OAAO,0BAA0B,iBAAiB;AAEjE,YAAM,YAAY,gBAAgB;AAAA,QAChC,0BAA0B;AAAA,UACxB,gBAAgB;AAAA,UAChB,gBAAgB,mBAAmB,gBAAgB;AAAA,QACrD;AAAA,MACF;AAEA,YAAM,aAAa;AAAA,QACjB;AAAA,QACA,eAAe;AAAA,MACjB,CAAC;AAED,YAAM,KAAK,kBAAkB,IAAI;AAAA,QAC/B;AAAA,QACA,YAAY;AAAA,QACZ,eAAe;AAAA,QACf,UAAU;AAAA,MACZ,CAAC;AAAA,IACH;AAEA,kBAAS,OAAO,aAAqB;AACnC,YAAM,cAAc,MAAM,KAAK,kBAAkB,IAAI;AAErD,UAAI,CAAC,aAAa,YAAY;AAC5B,cAAM,IAAI;AAAA,UACR;AAAA,QACF;AAAA,MACF;AAEA,YAAM,KAAK,yBAAyB;AAAA,QAClC,WAAW,YAAY;AAAA,QACvB,YAAY,YAAY;AAAA,QACxB;AAAA,MACF,CAAC;AAED,YAAM,iBAAiB,MAAM,QAAQ,MAAM,EAAE,MAAM,aAAa;AAAA,QAC9D,SAAS;AAAA,UACP,SAAS;AAAA,QACX;AAAA,MACF,CAAC;AAED,UAAI,SAAS,KAAK,EAAE,WAAW,GAAG;AAChC,uBAAe,QAAQ,MAAM,IAAI,QAAQ,QAAQ;AAAA,MACnD;AAEA,YAAM,KAAK,kBAAkB,IAAI;AAAA,QAC/B,WAAW,YAAY;AAAA,QACvB,YAAY,YAAY;AAAA,QACxB,eAAe,YAAY;AAAA,QAC3B,UAAU;AAAA,MACZ,CAAC;AAAA,IACH;AAAA,EA1EG;AAAA,EA4EH,MAAc,yBAAyB;AAAA,IACrC;AAAA,IACA;AAAA,IACA;AAAA,EACF,GAIG;AACD,UAAM,4BAA4B,IAAI;AAAA,MACpC,gBAAgB,mBAAmB,gBAAgB;AAAA,IACrD;AAEA,8BAA0B,IAAI,UAAU;AACxC,8BAA0B;AAAA,MACxB,gBAAgB,eAAe,SAAoC;AAAA,MACnE,gBAAgB;AAAA,IAClB;AAEA,QAAI;AACF,YAAM,UAAU,YAAY,OAAO;AAAA,QACjC,WAAW;AAAA,UACT,WAAW,KAAK,OAAO,YAAY,EAAE;AAAA,UACrC,IAAI;AAAA,YACF,MAAM,KAAK;AAAA,YACX,IAAI,KAAK;AAAA,UACX;AAAA,UACA,MAAM;AAAA,YACJ,IAAI;AAAA,YACJ,MAAM,WAAW,MAAK,oBAAI,KAAK,GAAE,eAAe,CAAC;AAAA,YACjD,aAAa;AAAA,UACf;AAAA,UACA,kBAAkB;AAAA,YAChB,EAAE,KAAK,IAAI,MAAM,aAAa;AAAA,YAC9B,EAAE,KAAK,IAAI,MAAM,aAAa;AAAA,YAC9B,EAAE,KAAK,KAAK,MAAM,aAAa;AAAA,YAC/B,EAAE,KAAK,MAAM,MAAM,aAAa;AAAA,UAClC;AAAA,UACA,wBAAwB;AAAA,YACtB,oBAAoB;AAAA,YACpB,aAAa;AAAA,YACb,kBAAkB;AAAA,UACpB;AAAA,UACA,SAAS;AAAA,UACT,aAAa;AAAA,QACf;AAAA,MACF,CAAC;AAAA,IACH,SAAS,OAAO;AACd,YAAM,IAAI,MAAM,4BAA4B,EAAE,OAAO,MAAM,CAAC;AAAA,IAC9D;AAAA,EACF;AAAA,EAEA,MAAc,wBAAwB;AACpC,QAAI;AACF,YAAM,QAAQ,MAAM,UAAU,YAAY,IAAI;AAAA,QAC5C,WAAW;AAAA,UACT,WAAW,WAAW,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC;AAAA,UACpC,MAAM,KAAK;AAAA,UACX,kBAAkB,CAAC;AAAA,UACnB,SAAS;AAAA,UACT,kBAAkB;AAAA,QACpB;AAAA,QACA,WAAW;AAAA,MACb,CAAC;AAED,aAAO;AAAA,IAGT,SAAS,OAAO;AACd,YAAM,IAAI,MAAM,4BAA4B,EAAE,OAAO,MAAM,CAAC;AAAA,IAC9D;AAAA,EACF;AACF;AA3Ja,mBASK,KAAK;;;AC3BvB,SAAS,2BAA2B;AACpC,SAAS,qCAAqC;AAC9C,SAAS,kBAAkB;AAC3B;AAAA,EAeE,mBAAAA;AAAA,EACA;AAAA,OACK;AACP,SAAS,yBAAyB;;;ACf3B,SAAS,kBAAkB,SAEhC;AACA,QAAM,eACJ,CAAC,WACA,MAAM,QAAQ,OAAO,KAAK,QAAQ,SAAS,WAAW,KACvD,YAAY;AAEd,SAAO,EAAE,aAAa;AACxB;;;ADUA,eAAe;AAUf,IAAM,uCAAN,cAAmD,8BAA8B;AAAA,EAC/E,gBAAgB,UAAoD;AAClE,UAAM,UAAU,MAAM,SAAS,UAAU,MAAM;AAC/C,WAAO,iBAAiB,UAAU,OAAO;AACzC,WAAO,iBAAiB,WAAW,OAAO;AAE1C,WAAO,MAAM;AACX,aAAO,oBAAoB,UAAU,OAAO;AAC5C,aAAO,oBAAoB,WAAW,OAAO;AAAA,IAC/C;AAAA,EACF;AACF;AAEA,eAAe,WAAW,SAAoC;AAC5D,QAAM,SAAS,QAAQ,UAAW,MAAM,WAAW,OAAO;AAC1D,MAAI,OAA8B;AAElC,QAAM,EAAE,aAAa,IAAI,kBAAkB,QAAQ,OAAO;AAE1D,QAAM,kBAA0B,CAAC;AAEjC,QAAM,UAAU,eAAe,MAAM,oBAAoB,IAAI;AAE7D,MAAI,QAAQ,KAAK,SAAS,SAAS;AACjC,WAAO;AAAA,MACL,eAAe,MAAM;AAAA,MAAC;AAAA,MACtB;AAAA,MACA;AAAA,MACA,SAAS,MAAM;AAAA,MAAC;AAAA,MAChB;AAAA,IACF;AAAA,EACF;AAEA,QAAM,SAAS,IAAI,qCAAqC;AAAA,IACtD,MAAM,QAAQ,KAAK;AAAA,IACnB,qBAAqB,QAAQ;AAAA,IAC7B,SAAS,CAAC,SAAS;AACjB,UAAI,MAAM;AACR,aAAK,YAAY,QAAQ,IAAI;AAAA,MAC/B,OAAO;AACL,wBAAgB,KAAK,IAAI;AAAA,MAC3B;AAAA,IACF;AAAA,IACA,YAAY,CAAC,SAAS;AACpB,sBAAgB,OAAO,gBAAgB,QAAQ,IAAI,GAAG,CAAC;AAAA,IACzD;AAAA,EACF,CAAC;AAED,WAAS,cAAc,SAAkB;AACvC,QAAI,SAAS;AACX,aAAO,OAAO;AAAA,IAChB,OAAO;AACL,aAAO,QAAQ;AAAA,IACjB;AAAA,EACF;AAEA,WAAS,QAAQ,OAAkB;AACjC,WAAO;AAAA,EACT;AAEA,MAAI,QAAQ,KAAK,SAAS,YAAY,CAAC,QAAQ,KAAK,MAAM;AACxD,kBAAc,IAAI;AAAA,EACpB;AAEA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAEA,eAAsB,8BACpB,SACA;AACA,QAAM,EAAE,eAAe,iBAAiB,SAAS,QAAQ,QAAQ,IAC/D,MAAM,WAAW,OAAO;AAE1B,QAAM,UAAU,MAAM,2BAA2B;AAAA,IAC/C;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC;AAED,UAAQ,QAAQ,MAAM,IAAI;AAE1B,UAAQ,kBAAkB,WAAW,IAAI;AAEzC,SAAO;AAAA,IACL,OAAO,QAAQ;AAAA,IACf,MAAM,QAAQ,MAAM;AAAA,IACpB,MAAM,MAAM;AAEV,oBAAc,KAAK;AACnB,cAAQ,KAAK;AAAA,IACf;AAAA,IACA,QAAQ,MAAM;AACZ,aAAO,QAAQ,OAAO;AAAA,IACxB;AAAA,EACF;AACF;AAaA,eAAsB,yBAIpB,SAAmC;AACnC,QAAM,EAAE,eAAe,iBAAiB,SAAS,QAAQ,QAAQ,IAC/D,MAAM,WAAW,OAAO;AAE1B,MAAI,wBAAwB,MAAM;AAAA,EAAC;AAEnC,MAAI,QAAQ,KAAK,SAAS,YAAY;AAIpC,QAASC,oBAAT,SAA0B,iBAA0B;AAClD,UAAI,iBAAiB;AACnB,sBAAc,IAAI;AAAA,MACpB,OAAO;AACL,sBAAc,KAAK;AAAA,MACrB;AAAA,IACF;AANS,2BAAAA;AAHT,UAAM,oBAAoB,QAAQ;AAClC,UAAM,cAAc,QAAQ,eAAgB,MAAM,kBAAkB,IAAI;AAUxE,4BAAwB,kBAAkB,SAASA,iBAAgB;AACnE,IAAAA,kBAAiB,kBAAkB,mBAAmB,WAAW,CAAC;AAAA,EACpE;AAEA,QAAM,UAAU,MAAM,kBAAkB;AAAA,IACtC,aAAa,QAAQ;AAAA,IACrB,iBAAiB,QAAQ;AAAA,IACzB;AAAA,IACA;AAAA,IACA;AAAA,IACA,oBAAoB,QAAQ;AAAA,IAC5B,eAAe,QAAQ;AAAA,IACvB,iBAAiB;AAAA,IACjB,mBAAmB,QAAQ;AAAA,EAC7B,CAAC;AAED,UAAQ,QAAQ,IAAI;AAEpB,SAAO;AAAA,IACL,IAAI,QAAQ;AAAA,IACZ,MAAM,QAAQ;AAAA,IACd,mBAAmB,QAAQ;AAAA,IAC3B,MAAM,MAAM;AAEV,oBAAc,KAAK;AACnB,4BAAsB;AACtB,cAAQ,KAAK;AAAA,IACf;AAAA,IACA,QAAQ,MAAM;AACZ,4BAAsB;AACtB,aAAO,QAAQ,OAAO;AAAA,IACxB;AAAA,EACF;AACF;AAOO,SAAS,0BACd,WACA,QACA;AACA,MAAI;AACJ,QAAM,cAAc,IAAI,QAAc,CAAC,YAAY;AACjD,kBAAc;AAAA,EAChB,CAAC;AAED,MAAI;AACJ,QAAM,iBAAiB,IAAI,QAAmB,CAAC,YAAY;AACzD,qBAAiB;AAAA,EACnB,CAAC;AAED,OAAM,iBAAkB;AACtB,aAAS,MAAM,GAAG,MAAM,KAAK,OAAO;AAElC,eAAS,QAAQ,GAAG,QAAQ,GAAG,SAAS;AAEtC,cAAM,0BAA0B,MAAM,UAAU,MAAM;AAAA,UACpD,YAAY,MAAM;AAAA,UAClB,EAAE,aAAa,KAAK;AAAA,UACpB,OAAO,SAAS;AACd,gBAAI,CAAC,KAAM,QAAO;AAElB,kBAAM,YACJ,aAAa,QAAQ,YAAY,MAAM,GAAG,KAC1C,OAAO,mBAAmB,SAAmC;AAC/D,yBAAa,QAAQ,YAAY,MAAM,KAAK,SAAS;AAErD,2BAAe,SAAsB;AAErC,kBAAM;AACN,oBAAQ,IAAI,kBAAkB,YAAY,MAAM,KAAK,SAAS;AAC9D,mBAAO;AAAA,UACT;AAAA,QACF;AAEA,YAAI,4BAA4B,mBAAmB;AACjD;AAAA,QACF;AAAA,MACF;AAAA,IACF;AACA,UAAM,IAAI,MAAM,gDAAgD;AAAA,EAClE,EAAG;AAEH,SAAO,eAAe,KAAK,CAAC,eAAe;AAAA,IACzC;AAAA,IACA;AAAA,EACF,EAAE;AACJ;;;AEtQA;AAAA,EAKE;AAAA,EAEA;AAAA,OAEK;;;ACPA,IAAM,sBAAN,MAA6C;AAAA,EAClD,cAAc;AAAA,EAAC;AAAA,EAEf,MAAM,IAAI,KAAa;AACrB,WAAO,aAAa,QAAQ,GAAG;AAAA,EACjC;AAAA,EAEA,MAAM,IAAI,KAAa,OAAe;AACpC,iBAAa,QAAQ,KAAK,KAAK;AAAA,EACjC;AAAA,EAEA,MAAM,OAAO,KAAa;AACxB,iBAAa,WAAW,GAAG;AAAA,EAC7B;AAAA,EAEA,MAAM,WAAW;AACf,iBAAa,MAAM;AAAA,EACrB;AACF;;;ADeO,IAAM,4BAAN,cAIG,mBAAoE;AAAA;AAAA,EAE5E,aAAa;AACX,QAAI,OAAO,WAAW,aAAa;AAEjC,aAAO,IAAI,gBAAgB;AAAA,IAC7B,OAAO;AACL,aAAO,IAAI,oBAAoB;AAAA,IACjC;AAAA,EACF;AAAA,EAEA,MAAM,cACJ,OACA,WACA;AACA,QAAI,MAAM,WAAW;AACnB,aAAO,8BAA8B;AAAA,QACnC,MAAM,MAAM;AAAA,QACZ,SAAS,MAAM;AAAA,QACf,mBAAmB,KAAK;AAAA,MAC1B,CAAC;AAAA,IACH,OAAO;AACL,aAAO,yBAA4B;AAAA,QACjC,MAAM,MAAM;AAAA,QACZ,SAAS,MAAM;AAAA,QACf,eAAe,MAAM;AAAA,QACrB,aAAa,WAAW;AAAA,QACxB,iBAAiB,WAAW;AAAA,QAC5B,oBAAoB,MAAM;AAAA,QAC1B,mBAAmB,KAAK;AAAA,MAC1B,CAAC;AAAA,IACH;AAAA,EACF;AAAA,EAEA,aAAa,OAAmC;AAC9C,QAAI,CAAC,KAAK,OAAO;AACf,aAAO;AAAA,IACT;AAEA,WACE,KAAK,MAAM,KAAK,SAAS,MAAM,KAAK,QACpC,KAAK,MAAM,KAAK,SAAS,MAAM,KAAK,QACpC,KAAK,MAAM,cAAc,MAAM;AAAA,EAEnC;AACF;;;ALpDA,SAAS,uBAAuB;AArBhC,eAAe;AAQR,SAAS,iBACd,OACA,MAEA;AAAA,EACE,UAAU,OAAO,SAAS,KAAK,QAAQ,QAAQ,EAAE;AAAA,EACjD;AACF,IAA8C,CAAC,GACvC;AACR,SAAO,qBAAqB,OAAO,MAAM,SAAS,SAAS;AAC7D;AAMA,eAAsB,oCAEpB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAWE;AACA,QAAM,SAAS,MAAM,kBAAkB;AAAA,IACrC,WAAW,OAAO,SAAS;AAAA,IAC3B;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC;AAED,MAAI,QAAQ;AACV,WAAO,QAAQ;AAAA,MACb,CAAC;AAAA,MACD;AAAA,MACA,OAAO,SAAS,KAAK,QAAQ,QAAQ,EAAE;AAAA,IACzC;AAAA,EACF;AAEA,SAAO;AACT;","names":["cojsonInternals","handleAuthUpdate"]}
+{"version":3,"sources":["../../src/browser/index.ts","../../src/browser/utils/export-account-inspector.ts","../../src/browser/auth/PasskeyAuth.ts","../../src/browser/createBrowserContext.ts","../../src/browser/storageOptions.ts","../../src/browser/BrowserContextManager.ts","../../src/browser/auth/LocalStorageKVStore.ts"],"sourcesContent":["import {\n  Account,\n  CoValue,\n  CoValueClassOrSchema,\n  InviteSecret,\n  createInviteLink as baseCreateInviteLink,\n  consumeInviteLink,\n} from \"jazz-tools\";\nimport { setupInspector } from \"./utils/export-account-inspector.js\";\nexport { BrowserPasskeyAuth } from \"./auth/PasskeyAuth.js\";\n\nsetupInspector();\n\nexport * from \"./createBrowserContext.js\";\nexport * from \"./BrowserContextManager.js\";\n\nexport { LocalStorageKVStore } from \"./auth/LocalStorageKVStore.js\";\n\n/** @category Invite Links */\nexport function createInviteLink<C extends CoValue>(\n  value: C,\n  role: \"reader\" | \"writer\" | \"admin\" | \"writeOnly\",\n  // default to same address as window.location, but without hash\n  {\n    baseURL = window.location.href.replace(/#.*$/, \"\"),\n    valueHint,\n  }: { baseURL?: string; valueHint?: string } = {},\n): string {\n  return baseCreateInviteLink(value, role, baseURL, valueHint);\n}\n\n/** @category Invite Links */\nexport { parseInviteLink } from \"jazz-tools\";\n\n/** @category Invite Links */\nexport async function consumeInviteLinkFromWindowLocation<\n  S extends CoValueClassOrSchema,\n>({\n  as,\n  forValueHint,\n  invitedObjectSchema,\n}: {\n  as?: Account;\n  forValueHint?: string;\n  invitedObjectSchema: S;\n}): Promise<\n  | {\n      valueID: string;\n      valueHint?: string;\n      inviteSecret: InviteSecret;\n    }\n  | undefined\n> {\n  const result = await consumeInviteLink({\n    inviteURL: window.location.href,\n    as,\n    forValueHint,\n    invitedObjectSchema,\n  });\n\n  if (result) {\n    window.history.replaceState(\n      {},\n      \"\",\n      window.location.href.replace(/#.*$/, \"\"),\n    );\n  }\n\n  return result;\n}\n","import { AuthSecretStorage } from \"jazz-tools\";\n\nasync function exportAccountToInspector() {\n  const authSecretStorage = new AuthSecretStorage();\n  const localStorageData = await authSecretStorage.get();\n\n  if (!localStorageData) {\n    console.error(\"No account data found in localStorage\");\n    return;\n  }\n\n  const encodedAccountSecret = btoa(localStorageData.accountSecret);\n  window.open(\n    new URL(\n      `#/import/${localStorageData?.accountID}/${encodedAccountSecret}`,\n      \"https://inspector.jazz.tools\",\n    ).toString(),\n    \"_blank\",\n  );\n}\n\nfunction listenForCmdJ() {\n  if (typeof window === \"undefined\") return;\n\n  const cb = (e: any) => {\n    if (e.metaKey && e.key === \"j\") {\n      if (\n        confirm(\n          \"Are you sure you want to inspect your account using inspector.jazz.tools? This lets anyone with the secret inspector URL read your data and impersonate you.\",\n        )\n      ) {\n        exportAccountToInspector();\n      }\n    }\n  };\n\n  window.addEventListener(\"keydown\", cb);\n\n  return () => {\n    window.removeEventListener(\"keydown\", cb);\n  };\n}\n\n/**\n * Automatically sets up the Cmd+J listener if 'allowJazzInspector' is present in the URL\n * @returns A cleanup function if the listener was set up, undefined otherwise\n */\nexport function setupInspector() {\n  if (typeof window === \"undefined\") return;\n\n  const url = new URL(window.location.href);\n  if (\n    url.hash.includes(\"allowJazzInspector\") ||\n    process.env.NODE_ENV === \"development\"\n  ) {\n    return listenForCmdJ();\n  }\n}\n","import { CryptoProvider, RawAccountID, cojsonInternals } from \"cojson\";\nimport {\n  Account,\n  AuthSecretStorage,\n  AuthenticateAccountFunction,\n  ID,\n} from \"jazz-tools\";\n\n/**\n * `BrowserPasskeyAuth` provides a `JazzAuth` object for passkey authentication.\n *\n * ```ts\n * import { BrowserPasskeyAuth } from \"jazz-tools/browser\";\n *\n * const auth = new BrowserPasskeyAuth(driver, appName);\n * ```\n *\n * @category Auth Providers\n */\nexport class BrowserPasskeyAuth {\n  constructor(\n    protected crypto: CryptoProvider,\n    protected authenticate: AuthenticateAccountFunction,\n    protected authSecretStorage: AuthSecretStorage,\n    public appName: string,\n    public appHostname: string = window.location.hostname,\n  ) {}\n\n  static readonly id = \"passkey\";\n\n  logIn = async () => {\n    const { crypto, authenticate } = this;\n\n    const webAuthNCredential = await this.getPasskeyCredentials();\n\n    if (!webAuthNCredential) {\n      return;\n    }\n\n    const webAuthNCredentialPayload = new Uint8Array(\n      webAuthNCredential.response.userHandle,\n    );\n    const accountSecretSeed = webAuthNCredentialPayload.slice(\n      0,\n      cojsonInternals.secretSeedLength,\n    );\n\n    const secret = crypto.agentSecretFromSecretSeed(accountSecretSeed);\n\n    const accountID = cojsonInternals.rawCoIDfromBytes(\n      webAuthNCredentialPayload.slice(\n        cojsonInternals.secretSeedLength,\n        cojsonInternals.secretSeedLength + cojsonInternals.shortHashLength,\n      ),\n    ) as ID<Account>;\n\n    await authenticate({\n      accountID,\n      accountSecret: secret,\n    });\n\n    await this.authSecretStorage.set({\n      accountID,\n      secretSeed: accountSecretSeed,\n      accountSecret: secret,\n      provider: \"passkey\",\n    });\n  };\n\n  signUp = async (username: string) => {\n    const credentials = await this.authSecretStorage.get();\n\n    if (!credentials?.secretSeed) {\n      throw new Error(\n        \"Not enough credentials to register the account with passkey\",\n      );\n    }\n\n    await this.createPasskeyCredentials({\n      accountID: credentials.accountID,\n      secretSeed: credentials.secretSeed,\n      username,\n    });\n\n    const currentAccount = await Account.getMe().$jazz.ensureLoaded({\n      resolve: {\n        profile: true,\n      },\n    });\n\n    if (username.trim().length !== 0) {\n      currentAccount.profile.$jazz.set(\"name\", username);\n    }\n\n    await this.authSecretStorage.set({\n      accountID: credentials.accountID,\n      secretSeed: credentials.secretSeed,\n      accountSecret: credentials.accountSecret,\n      provider: \"passkey\",\n    });\n  };\n\n  private async createPasskeyCredentials({\n    accountID,\n    secretSeed,\n    username,\n  }: {\n    accountID: ID<Account>;\n    secretSeed: Uint8Array;\n    username: string;\n  }) {\n    const webAuthNCredentialPayload = new Uint8Array(\n      cojsonInternals.secretSeedLength + cojsonInternals.shortHashLength,\n    );\n\n    webAuthNCredentialPayload.set(secretSeed);\n    webAuthNCredentialPayload.set(\n      cojsonInternals.rawCoIDtoBytes(accountID as unknown as RawAccountID),\n      cojsonInternals.secretSeedLength,\n    );\n\n    try {\n      await navigator.credentials.create({\n        publicKey: {\n          challenge: this.crypto.randomBytes(20),\n          rp: {\n            name: this.appName,\n            id: this.appHostname,\n          },\n          user: {\n            id: webAuthNCredentialPayload,\n            name: username + ` (${new Date().toLocaleString()})`,\n            displayName: username,\n          },\n          pubKeyCredParams: [\n            { alg: -7, type: \"public-key\" },\n            { alg: -8, type: \"public-key\" },\n            { alg: -37, type: \"public-key\" },\n            { alg: -257, type: \"public-key\" },\n          ],\n          authenticatorSelection: {\n            requireResidentKey: true,\n            residentKey: \"required\",\n            userVerification: \"preferred\",\n          },\n          timeout: 60000,\n          attestation: \"direct\",\n        },\n      });\n    } catch (error) {\n      throw new Error(\"Passkey creation aborted\", { cause: error });\n    }\n  }\n\n  private async getPasskeyCredentials() {\n    try {\n      const value = await navigator.credentials.get({\n        publicKey: {\n          challenge: Uint8Array.from([0, 1, 2]),\n          rpId: this.appHostname,\n          allowCredentials: [],\n          timeout: 60000,\n          userVerification: \"preferred\",\n        },\n        mediation: \"optional\",\n      });\n\n      return value as\n        | (Credential & { response: { userHandle: ArrayBuffer } })\n        | null;\n    } catch (error) {\n      throw new Error(\"Passkey creation aborted\", { cause: error });\n    }\n  }\n}\n","import { LocalNode, Peer, RawAccountID } from \"cojson\";\nimport { getIndexedDBStorage } from \"cojson-storage-indexeddb\";\nimport { WebSocketPeerWithReconnection } from \"cojson-transport-ws\";\nimport { WasmCrypto } from \"cojson/crypto/WasmCrypto\";\nimport {\n  Account,\n  AccountClass,\n  AgentID,\n  AnyAccountSchema,\n  AuthCredentials,\n  AuthSecretStorage,\n  CoValue,\n  CoValueFromRaw,\n  CryptoProvider,\n  ID,\n  InviteSecret,\n  NewAccountProps,\n  SessionID,\n  SyncConfig,\n  cojsonInternals,\n  createAnonymousJazzContext,\n} from \"jazz-tools\";\nimport { createJazzContext } from \"jazz-tools\";\nimport { StorageConfig, getStorageOptions } from \"./storageOptions.js\";\nimport { setupInspector } from \"./utils/export-account-inspector.js\";\n\nsetupInspector();\n\nexport type BaseBrowserContextOptions = {\n  sync: SyncConfig;\n  reconnectionTimeout?: number;\n  storage?: StorageConfig;\n  crypto?: CryptoProvider;\n  authSecretStorage: AuthSecretStorage;\n};\n\nclass BrowserWebSocketPeerWithReconnection extends WebSocketPeerWithReconnection {\n  onNetworkChange(callback: (connected: boolean) => void): () => void {\n    const handler = () => callback(navigator.onLine);\n    window.addEventListener(\"online\", handler);\n    window.addEventListener(\"offline\", handler);\n\n    return () => {\n      window.removeEventListener(\"online\", handler);\n      window.removeEventListener(\"offline\", handler);\n    };\n  }\n}\n\nasync function setupPeers(options: BaseBrowserContextOptions) {\n  const crypto = options.crypto || (await WasmCrypto.create());\n  let node: LocalNode | undefined = undefined;\n\n  const { useIndexedDB } = getStorageOptions(options.storage);\n\n  const peersToLoadFrom: Peer[] = [];\n\n  const storage = useIndexedDB ? await getIndexedDBStorage() : undefined;\n\n  if (options.sync.when === \"never\") {\n    return {\n      toggleNetwork: () => {},\n      peersToLoadFrom,\n      storage,\n      setNode: () => {},\n      crypto,\n    };\n  }\n\n  const wsPeer = new BrowserWebSocketPeerWithReconnection({\n    peer: options.sync.peer,\n    reconnectionTimeout: options.reconnectionTimeout,\n    addPeer: (peer) => {\n      if (node) {\n        node.syncManager.addPeer(peer);\n      } else {\n        peersToLoadFrom.push(peer);\n      }\n    },\n    removePeer: (peer) => {\n      peersToLoadFrom.splice(peersToLoadFrom.indexOf(peer), 1);\n    },\n  });\n\n  function toggleNetwork(enabled: boolean) {\n    if (enabled) {\n      wsPeer.enable();\n    } else {\n      wsPeer.disable();\n    }\n  }\n\n  function setNode(value: LocalNode) {\n    node = value;\n  }\n\n  if (options.sync.when === \"always\" || !options.sync.when) {\n    toggleNetwork(true);\n  }\n\n  return {\n    toggleNetwork,\n    peersToLoadFrom,\n    storage,\n    setNode,\n    crypto,\n  };\n}\n\nexport async function createJazzBrowserGuestContext(\n  options: BaseBrowserContextOptions,\n) {\n  const { toggleNetwork, peersToLoadFrom, setNode, crypto, storage } =\n    await setupPeers(options);\n\n  const context = await createAnonymousJazzContext({\n    crypto,\n    peersToLoadFrom,\n    storage,\n  });\n\n  setNode(context.agent.node);\n\n  options.authSecretStorage.emitUpdate(null);\n\n  return {\n    guest: context.agent,\n    node: context.agent.node,\n    done: () => {\n      // TODO: Sync all the covalues before closing the connection & context\n      toggleNetwork(false);\n      context.done();\n    },\n    logOut: () => {\n      return context.logOut();\n    },\n  };\n}\n\nexport type BrowserContextOptions<\n  S extends\n    | (AccountClass<Account> & CoValueFromRaw<Account>)\n    | AnyAccountSchema,\n> = {\n  credentials?: AuthCredentials;\n  AccountSchema?: S;\n  newAccountProps?: NewAccountProps;\n  defaultProfileName?: string;\n} & BaseBrowserContextOptions;\n\nexport async function createJazzBrowserContext<\n  S extends\n    | (AccountClass<Account> & CoValueFromRaw<Account>)\n    | AnyAccountSchema,\n>(options: BrowserContextOptions<S>) {\n  const { toggleNetwork, peersToLoadFrom, setNode, crypto, storage } =\n    await setupPeers(options);\n\n  let unsubscribeAuthUpdate = () => {};\n\n  if (options.sync.when === \"signedUp\") {\n    const authSecretStorage = options.authSecretStorage;\n    const credentials = options.credentials ?? (await authSecretStorage.get());\n\n    function handleAuthUpdate(isAuthenticated: boolean) {\n      if (isAuthenticated) {\n        toggleNetwork(true);\n      } else {\n        toggleNetwork(false);\n      }\n    }\n\n    unsubscribeAuthUpdate = authSecretStorage.onUpdate(handleAuthUpdate);\n    handleAuthUpdate(authSecretStorage.getIsAuthenticated(credentials));\n  }\n\n  const context = await createJazzContext({\n    credentials: options.credentials,\n    newAccountProps: options.newAccountProps,\n    peersToLoadFrom,\n    storage,\n    crypto,\n    defaultProfileName: options.defaultProfileName,\n    AccountSchema: options.AccountSchema,\n    sessionProvider: provideBrowserLockSession,\n    authSecretStorage: options.authSecretStorage,\n  });\n\n  setNode(context.node);\n\n  return {\n    me: context.account,\n    node: context.node,\n    authSecretStorage: context.authSecretStorage,\n    done: () => {\n      // TODO: Sync all the covalues before closing the connection & context\n      toggleNetwork(false);\n      unsubscribeAuthUpdate();\n      context.done();\n    },\n    logOut: () => {\n      unsubscribeAuthUpdate();\n      return context.logOut();\n    },\n  };\n}\n\n/** @category Auth Providers */\nexport type SessionProvider = (\n  accountID: ID<Account> | AgentID,\n) => Promise<SessionID>;\n\nexport function provideBrowserLockSession(\n  accountID: ID<Account> | AgentID,\n  crypto: CryptoProvider,\n) {\n  if (typeof navigator === \"undefined\" || !navigator.locks?.request) {\n    // Fallback to random session ID for each tab session\n    return Promise.resolve({\n      sessionID: crypto.newRandomSessionID(accountID as RawAccountID | AgentID),\n      sessionDone: () => {},\n    });\n  }\n\n  let sessionDone!: () => void;\n  const donePromise = new Promise<void>((resolve) => {\n    sessionDone = resolve;\n  });\n\n  let resolveSession: (sessionID: SessionID) => void;\n  const sessionPromise = new Promise<SessionID>((resolve) => {\n    resolveSession = resolve;\n  });\n\n  void (async function () {\n    for (let idx = 0; idx < 100; idx++) {\n      // To work better around StrictMode\n      for (let retry = 0; retry < 2; retry++) {\n        // console.debug(\"Trying to get lock\", accountID + \"_\" + idx);\n        const sessionFinishedOrNoLock = await navigator.locks.request(\n          accountID + \"_\" + idx,\n          { ifAvailable: true },\n          async (lock) => {\n            if (!lock) return \"noLock\";\n\n            const sessionID =\n              localStorage.getItem(accountID + \"_\" + idx) ||\n              crypto.newRandomSessionID(accountID as RawAccountID | AgentID);\n            localStorage.setItem(accountID + \"_\" + idx, sessionID);\n\n            resolveSession(sessionID as SessionID);\n\n            await donePromise;\n            console.log(\"Done with lock\", accountID + \"_\" + idx, sessionID);\n            return \"sessionFinished\";\n          },\n        );\n\n        if (sessionFinishedOrNoLock === \"sessionFinished\") {\n          return;\n        }\n      }\n    }\n    throw new Error(\"Couldn't get lock on session after 100x2 tries\");\n  })();\n\n  return sessionPromise.then((sessionID) => ({\n    sessionID,\n    sessionDone,\n  }));\n}\n\n/** @category Invite Links */\nexport function createInviteLink<C extends CoValue>(\n  value: C,\n  role: \"reader\" | \"writer\" | \"admin\" | \"writeOnly\",\n  // default to same address as window.location, but without hash\n  {\n    baseURL = window.location.href.replace(/#.*$/, \"\"),\n    valueHint,\n  }: { baseURL?: string; valueHint?: string } = {},\n): string {\n  const coValueCore = value.$jazz.raw.core;\n  let currentCoValue = coValueCore;\n\n  while (currentCoValue.verified.header.ruleset.type === \"ownedByGroup\") {\n    currentCoValue = currentCoValue.getGroup().core;\n  }\n\n  const { ruleset, meta } = currentCoValue.verified.header;\n\n  if (ruleset.type !== \"group\" || meta?.type === \"account\") {\n    throw new Error(\"Can't create invite link for object without group\");\n  }\n\n  const group = cojsonInternals.expectGroup(currentCoValue.getCurrentContent());\n  const inviteSecret = group.createInvite(role);\n\n  return `${baseURL}#/invite/${valueHint ? valueHint + \"/\" : \"\"}${\n    value.$jazz.id\n  }/${inviteSecret}`;\n}\n\n/** @category Invite Links */\nexport function parseInviteLink<C extends CoValue>(\n  inviteURL: string,\n):\n  | {\n      valueID: ID<C>;\n      valueHint?: string;\n      inviteSecret: InviteSecret;\n    }\n  | undefined {\n  const url = new URL(inviteURL);\n  const parts = url.hash.split(\"/\");\n\n  let valueHint: string | undefined;\n  let valueID: ID<C> | undefined;\n  let inviteSecret: InviteSecret | undefined;\n\n  if (parts[0] === \"#\" && parts[1] === \"invite\") {\n    if (parts.length === 5) {\n      valueHint = parts[2];\n      valueID = parts[3] as ID<C>;\n      inviteSecret = parts[4] as InviteSecret;\n    } else if (parts.length === 4) {\n      valueID = parts[2] as ID<C>;\n      inviteSecret = parts[3] as InviteSecret;\n    }\n\n    if (!valueID || !inviteSecret) {\n      return undefined;\n    }\n    return { valueID, inviteSecret, valueHint };\n  }\n}\n","type StorageOption = \"indexedDB\";\ntype CombinedStorageOption = [\"indexedDB\"];\nexport type StorageConfig =\n  | StorageOption\n  | CombinedStorageOption\n  | [StorageOption];\n\nexport function getStorageOptions(storage?: StorageConfig): {\n  useIndexedDB: boolean;\n} {\n  const useIndexedDB =\n    !storage ||\n    (Array.isArray(storage) && storage.includes(\"indexedDB\")) ||\n    storage === \"indexedDB\";\n\n  return { useIndexedDB };\n}\n","import {\n  Account,\n  AccountClass,\n  AnyAccountSchema,\n  CoValueFromRaw,\n  InMemoryKVStore,\n  InstanceOfSchema,\n  JazzContextManager,\n  SyncConfig,\n} from \"jazz-tools\";\nimport { JazzContextManagerAuthProps } from \"jazz-tools\";\nimport { LocalStorageKVStore } from \"./auth/LocalStorageKVStore.js\";\nimport {\n  BaseBrowserContextOptions,\n  createJazzBrowserContext,\n  createJazzBrowserGuestContext,\n} from \"./createBrowserContext.js\";\n\nexport type JazzContextManagerProps<\n  S extends\n    | (AccountClass<Account> & CoValueFromRaw<Account>)\n    | AnyAccountSchema,\n> = {\n  guestMode?: boolean;\n  sync: SyncConfig;\n  onLogOut?: () => void;\n  logOutReplacement?: () => void;\n  onAnonymousAccountDiscarded?: (\n    anonymousAccount: InstanceOfSchema<S>,\n  ) => Promise<void>;\n  storage?: BaseBrowserContextOptions[\"storage\"];\n  AccountSchema?: S;\n  defaultProfileName?: string;\n};\n\nexport class JazzBrowserContextManager<\n  S extends\n    | (AccountClass<Account> & CoValueFromRaw<Account>)\n    | AnyAccountSchema,\n> extends JazzContextManager<InstanceOfSchema<S>, JazzContextManagerProps<S>> {\n  // TODO: When the storage changes, if the user is changed, update the context\n  getKvStore() {\n    if (typeof window === \"undefined\") {\n      // To handle running in SSR\n      return new InMemoryKVStore();\n    } else {\n      return new LocalStorageKVStore();\n    }\n  }\n\n  async getNewContext(\n    props: JazzContextManagerProps<S>,\n    authProps?: JazzContextManagerAuthProps,\n  ) {\n    if (props.guestMode) {\n      return createJazzBrowserGuestContext({\n        sync: props.sync,\n        storage: props.storage,\n        authSecretStorage: this.authSecretStorage,\n      });\n    } else {\n      return createJazzBrowserContext<S>({\n        sync: props.sync,\n        storage: props.storage,\n        AccountSchema: props.AccountSchema,\n        credentials: authProps?.credentials,\n        newAccountProps: authProps?.newAccountProps,\n        defaultProfileName: props.defaultProfileName,\n        authSecretStorage: this.authSecretStorage,\n      });\n    }\n  }\n\n  propsChanged(props: JazzContextManagerProps<S>) {\n    if (!this.props) {\n      return true;\n    }\n\n    return (\n      this.props.sync.when !== props.sync.when ||\n      this.props.sync.peer !== props.sync.peer ||\n      this.props.guestMode !== props.guestMode\n    );\n  }\n}\n","import { KvStore } from \"jazz-tools\";\n\nexport class LocalStorageKVStore implements KvStore {\n  constructor() {}\n\n  async get(key: string) {\n    return localStorage.getItem(key);\n  }\n\n  async set(key: string, value: string) {\n    localStorage.setItem(key, value);\n  }\n\n  async delete(key: string) {\n    localStorage.removeItem(key);\n  }\n\n  async clearAll() {\n    localStorage.clear();\n  }\n}\n"],"mappings":";AAAA;AAAA,EAKE,oBAAoB;AAAA,EACpB;AAAA,OACK;;;ACPP,SAAS,yBAAyB;AAElC,eAAe,2BAA2B;AACxC,QAAM,oBAAoB,IAAI,kBAAkB;AAChD,QAAM,mBAAmB,MAAM,kBAAkB,IAAI;AAErD,MAAI,CAAC,kBAAkB;AACrB,YAAQ,MAAM,uCAAuC;AACrD;AAAA,EACF;AAEA,QAAM,uBAAuB,KAAK,iBAAiB,aAAa;AAChE,SAAO;AAAA,IACL,IAAI;AAAA,MACF,YAAY,kBAAkB,SAAS,IAAI,oBAAoB;AAAA,MAC/D;AAAA,IACF,EAAE,SAAS;AAAA,IACX;AAAA,EACF;AACF;AAEA,SAAS,gBAAgB;AACvB,MAAI,OAAO,WAAW,YAAa;AAEnC,QAAM,KAAK,CAAC,MAAW;AACrB,QAAI,EAAE,WAAW,EAAE,QAAQ,KAAK;AAC9B,UACE;AAAA,QACE;AAAA,MACF,GACA;AACA,iCAAyB;AAAA,MAC3B;AAAA,IACF;AAAA,EACF;AAEA,SAAO,iBAAiB,WAAW,EAAE;AAErC,SAAO,MAAM;AACX,WAAO,oBAAoB,WAAW,EAAE;AAAA,EAC1C;AACF;AAMO,SAAS,iBAAiB;AAC/B,MAAI,OAAO,WAAW,YAAa;AAEnC,QAAM,MAAM,IAAI,IAAI,OAAO,SAAS,IAAI;AACxC,MACE,IAAI,KAAK,SAAS,oBAAoB,KACtC,QAAQ,IAAI,aAAa,eACzB;AACA,WAAO,cAAc;AAAA,EACvB;AACF;;;ACzDA,SAAuC,uBAAuB;AAC9D;AAAA,EACE;AAAA,OAIK;AAaA,IAAM,qBAAN,MAAyB;AAAA,EAC9B,YACY,QACA,cACA,mBACH,SACA,cAAsB,OAAO,SAAS,UAC7C;AALU;AACA;AACA;AACH;AACA;AAKT,iBAAQ,YAAY;AAClB,YAAM,EAAE,QAAQ,aAAa,IAAI;AAEjC,YAAM,qBAAqB,MAAM,KAAK,sBAAsB;AAE5D,UAAI,CAAC,oBAAoB;AACvB;AAAA,MACF;AAEA,YAAM,4BAA4B,IAAI;AAAA,QACpC,mBAAmB,SAAS;AAAA,MAC9B;AACA,YAAM,oBAAoB,0BAA0B;AAAA,QAClD;AAAA,QACA,gBAAgB;AAAA,MAClB;AAEA,YAAM,SAAS,OAAO,0BAA0B,iBAAiB;AAEjE,YAAM,YAAY,gBAAgB;AAAA,QAChC,0BAA0B;AAAA,UACxB,gBAAgB;AAAA,UAChB,gBAAgB,mBAAmB,gBAAgB;AAAA,QACrD;AAAA,MACF;AAEA,YAAM,aAAa;AAAA,QACjB;AAAA,QACA,eAAe;AAAA,MACjB,CAAC;AAED,YAAM,KAAK,kBAAkB,IAAI;AAAA,QAC/B;AAAA,QACA,YAAY;AAAA,QACZ,eAAe;AAAA,QACf,UAAU;AAAA,MACZ,CAAC;AAAA,IACH;AAEA,kBAAS,OAAO,aAAqB;AACnC,YAAM,cAAc,MAAM,KAAK,kBAAkB,IAAI;AAErD,UAAI,CAAC,aAAa,YAAY;AAC5B,cAAM,IAAI;AAAA,UACR;AAAA,QACF;AAAA,MACF;AAEA,YAAM,KAAK,yBAAyB;AAAA,QAClC,WAAW,YAAY;AAAA,QACvB,YAAY,YAAY;AAAA,QACxB;AAAA,MACF,CAAC;AAED,YAAM,iBAAiB,MAAM,QAAQ,MAAM,EAAE,MAAM,aAAa;AAAA,QAC9D,SAAS;AAAA,UACP,SAAS;AAAA,QACX;AAAA,MACF,CAAC;AAED,UAAI,SAAS,KAAK,EAAE,WAAW,GAAG;AAChC,uBAAe,QAAQ,MAAM,IAAI,QAAQ,QAAQ;AAAA,MACnD;AAEA,YAAM,KAAK,kBAAkB,IAAI;AAAA,QAC/B,WAAW,YAAY;AAAA,QACvB,YAAY,YAAY;AAAA,QACxB,eAAe,YAAY;AAAA,QAC3B,UAAU;AAAA,MACZ,CAAC;AAAA,IACH;AAAA,EA1EG;AAAA,EA4EH,MAAc,yBAAyB;AAAA,IACrC;AAAA,IACA;AAAA,IACA;AAAA,EACF,GAIG;AACD,UAAM,4BAA4B,IAAI;AAAA,MACpC,gBAAgB,mBAAmB,gBAAgB;AAAA,IACrD;AAEA,8BAA0B,IAAI,UAAU;AACxC,8BAA0B;AAAA,MACxB,gBAAgB,eAAe,SAAoC;AAAA,MACnE,gBAAgB;AAAA,IAClB;AAEA,QAAI;AACF,YAAM,UAAU,YAAY,OAAO;AAAA,QACjC,WAAW;AAAA,UACT,WAAW,KAAK,OAAO,YAAY,EAAE;AAAA,UACrC,IAAI;AAAA,YACF,MAAM,KAAK;AAAA,YACX,IAAI,KAAK;AAAA,UACX;AAAA,UACA,MAAM;AAAA,YACJ,IAAI;AAAA,YACJ,MAAM,WAAW,MAAK,oBAAI,KAAK,GAAE,eAAe,CAAC;AAAA,YACjD,aAAa;AAAA,UACf;AAAA,UACA,kBAAkB;AAAA,YAChB,EAAE,KAAK,IAAI,MAAM,aAAa;AAAA,YAC9B,EAAE,KAAK,IAAI,MAAM,aAAa;AAAA,YAC9B,EAAE,KAAK,KAAK,MAAM,aAAa;AAAA,YAC/B,EAAE,KAAK,MAAM,MAAM,aAAa;AAAA,UAClC;AAAA,UACA,wBAAwB;AAAA,YACtB,oBAAoB;AAAA,YACpB,aAAa;AAAA,YACb,kBAAkB;AAAA,UACpB;AAAA,UACA,SAAS;AAAA,UACT,aAAa;AAAA,QACf;AAAA,MACF,CAAC;AAAA,IACH,SAAS,OAAO;AACd,YAAM,IAAI,MAAM,4BAA4B,EAAE,OAAO,MAAM,CAAC;AAAA,IAC9D;AAAA,EACF;AAAA,EAEA,MAAc,wBAAwB;AACpC,QAAI;AACF,YAAM,QAAQ,MAAM,UAAU,YAAY,IAAI;AAAA,QAC5C,WAAW;AAAA,UACT,WAAW,WAAW,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC;AAAA,UACpC,MAAM,KAAK;AAAA,UACX,kBAAkB,CAAC;AAAA,UACnB,SAAS;AAAA,UACT,kBAAkB;AAAA,QACpB;AAAA,QACA,WAAW;AAAA,MACb,CAAC;AAED,aAAO;AAAA,IAGT,SAAS,OAAO;AACd,YAAM,IAAI,MAAM,4BAA4B,EAAE,OAAO,MAAM,CAAC;AAAA,IAC9D;AAAA,EACF;AACF;AA3Ja,mBASK,KAAK;;;AC3BvB,SAAS,2BAA2B;AACpC,SAAS,qCAAqC;AAC9C,SAAS,kBAAkB;AAC3B;AAAA,EAeE,mBAAAA;AAAA,EACA;AAAA,OACK;AACP,SAAS,yBAAyB;;;ACf3B,SAAS,kBAAkB,SAEhC;AACA,QAAM,eACJ,CAAC,WACA,MAAM,QAAQ,OAAO,KAAK,QAAQ,SAAS,WAAW,KACvD,YAAY;AAEd,SAAO,EAAE,aAAa;AACxB;;;ADUA,eAAe;AAUf,IAAM,uCAAN,cAAmD,8BAA8B;AAAA,EAC/E,gBAAgB,UAAoD;AAClE,UAAM,UAAU,MAAM,SAAS,UAAU,MAAM;AAC/C,WAAO,iBAAiB,UAAU,OAAO;AACzC,WAAO,iBAAiB,WAAW,OAAO;AAE1C,WAAO,MAAM;AACX,aAAO,oBAAoB,UAAU,OAAO;AAC5C,aAAO,oBAAoB,WAAW,OAAO;AAAA,IAC/C;AAAA,EACF;AACF;AAEA,eAAe,WAAW,SAAoC;AAC5D,QAAM,SAAS,QAAQ,UAAW,MAAM,WAAW,OAAO;AAC1D,MAAI,OAA8B;AAElC,QAAM,EAAE,aAAa,IAAI,kBAAkB,QAAQ,OAAO;AAE1D,QAAM,kBAA0B,CAAC;AAEjC,QAAM,UAAU,eAAe,MAAM,oBAAoB,IAAI;AAE7D,MAAI,QAAQ,KAAK,SAAS,SAAS;AACjC,WAAO;AAAA,MACL,eAAe,MAAM;AAAA,MAAC;AAAA,MACtB;AAAA,MACA;AAAA,MACA,SAAS,MAAM;AAAA,MAAC;AAAA,MAChB;AAAA,IACF;AAAA,EACF;AAEA,QAAM,SAAS,IAAI,qCAAqC;AAAA,IACtD,MAAM,QAAQ,KAAK;AAAA,IACnB,qBAAqB,QAAQ;AAAA,IAC7B,SAAS,CAAC,SAAS;AACjB,UAAI,MAAM;AACR,aAAK,YAAY,QAAQ,IAAI;AAAA,MAC/B,OAAO;AACL,wBAAgB,KAAK,IAAI;AAAA,MAC3B;AAAA,IACF;AAAA,IACA,YAAY,CAAC,SAAS;AACpB,sBAAgB,OAAO,gBAAgB,QAAQ,IAAI,GAAG,CAAC;AAAA,IACzD;AAAA,EACF,CAAC;AAED,WAAS,cAAc,SAAkB;AACvC,QAAI,SAAS;AACX,aAAO,OAAO;AAAA,IAChB,OAAO;AACL,aAAO,QAAQ;AAAA,IACjB;AAAA,EACF;AAEA,WAAS,QAAQ,OAAkB;AACjC,WAAO;AAAA,EACT;AAEA,MAAI,QAAQ,KAAK,SAAS,YAAY,CAAC,QAAQ,KAAK,MAAM;AACxD,kBAAc,IAAI;AAAA,EACpB;AAEA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAEA,eAAsB,8BACpB,SACA;AACA,QAAM,EAAE,eAAe,iBAAiB,SAAS,QAAQ,QAAQ,IAC/D,MAAM,WAAW,OAAO;AAE1B,QAAM,UAAU,MAAM,2BAA2B;AAAA,IAC/C;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC;AAED,UAAQ,QAAQ,MAAM,IAAI;AAE1B,UAAQ,kBAAkB,WAAW,IAAI;AAEzC,SAAO;AAAA,IACL,OAAO,QAAQ;AAAA,IACf,MAAM,QAAQ,MAAM;AAAA,IACpB,MAAM,MAAM;AAEV,oBAAc,KAAK;AACnB,cAAQ,KAAK;AAAA,IACf;AAAA,IACA,QAAQ,MAAM;AACZ,aAAO,QAAQ,OAAO;AAAA,IACxB;AAAA,EACF;AACF;AAaA,eAAsB,yBAIpB,SAAmC;AACnC,QAAM,EAAE,eAAe,iBAAiB,SAAS,QAAQ,QAAQ,IAC/D,MAAM,WAAW,OAAO;AAE1B,MAAI,wBAAwB,MAAM;AAAA,EAAC;AAEnC,MAAI,QAAQ,KAAK,SAAS,YAAY;AAIpC,QAASC,oBAAT,SAA0B,iBAA0B;AAClD,UAAI,iBAAiB;AACnB,sBAAc,IAAI;AAAA,MACpB,OAAO;AACL,sBAAc,KAAK;AAAA,MACrB;AAAA,IACF;AANS,2BAAAA;AAHT,UAAM,oBAAoB,QAAQ;AAClC,UAAM,cAAc,QAAQ,eAAgB,MAAM,kBAAkB,IAAI;AAUxE,4BAAwB,kBAAkB,SAASA,iBAAgB;AACnE,IAAAA,kBAAiB,kBAAkB,mBAAmB,WAAW,CAAC;AAAA,EACpE;AAEA,QAAM,UAAU,MAAM,kBAAkB;AAAA,IACtC,aAAa,QAAQ;AAAA,IACrB,iBAAiB,QAAQ;AAAA,IACzB;AAAA,IACA;AAAA,IACA;AAAA,IACA,oBAAoB,QAAQ;AAAA,IAC5B,eAAe,QAAQ;AAAA,IACvB,iBAAiB;AAAA,IACjB,mBAAmB,QAAQ;AAAA,EAC7B,CAAC;AAED,UAAQ,QAAQ,IAAI;AAEpB,SAAO;AAAA,IACL,IAAI,QAAQ;AAAA,IACZ,MAAM,QAAQ;AAAA,IACd,mBAAmB,QAAQ;AAAA,IAC3B,MAAM,MAAM;AAEV,oBAAc,KAAK;AACnB,4BAAsB;AACtB,cAAQ,KAAK;AAAA,IACf;AAAA,IACA,QAAQ,MAAM;AACZ,4BAAsB;AACtB,aAAO,QAAQ,OAAO;AAAA,IACxB;AAAA,EACF;AACF;AAOO,SAAS,0BACd,WACA,QACA;AACA,MAAI,OAAO,cAAc,eAAe,CAAC,UAAU,OAAO,SAAS;AAEjE,WAAO,QAAQ,QAAQ;AAAA,MACrB,WAAW,OAAO,mBAAmB,SAAmC;AAAA,MACxE,aAAa,MAAM;AAAA,MAAC;AAAA,IACtB,CAAC;AAAA,EACH;AAEA,MAAI;AACJ,QAAM,cAAc,IAAI,QAAc,CAAC,YAAY;AACjD,kBAAc;AAAA,EAChB,CAAC;AAED,MAAI;AACJ,QAAM,iBAAiB,IAAI,QAAmB,CAAC,YAAY;AACzD,qBAAiB;AAAA,EACnB,CAAC;AAED,OAAM,iBAAkB;AACtB,aAAS,MAAM,GAAG,MAAM,KAAK,OAAO;AAElC,eAAS,QAAQ,GAAG,QAAQ,GAAG,SAAS;AAEtC,cAAM,0BAA0B,MAAM,UAAU,MAAM;AAAA,UACpD,YAAY,MAAM;AAAA,UAClB,EAAE,aAAa,KAAK;AAAA,UACpB,OAAO,SAAS;AACd,gBAAI,CAAC,KAAM,QAAO;AAElB,kBAAM,YACJ,aAAa,QAAQ,YAAY,MAAM,GAAG,KAC1C,OAAO,mBAAmB,SAAmC;AAC/D,yBAAa,QAAQ,YAAY,MAAM,KAAK,SAAS;AAErD,2BAAe,SAAsB;AAErC,kBAAM;AACN,oBAAQ,IAAI,kBAAkB,YAAY,MAAM,KAAK,SAAS;AAC9D,mBAAO;AAAA,UACT;AAAA,QACF;AAEA,YAAI,4BAA4B,mBAAmB;AACjD;AAAA,QACF;AAAA,MACF;AAAA,IACF;AACA,UAAM,IAAI,MAAM,gDAAgD;AAAA,EAClE,EAAG;AAEH,SAAO,eAAe,KAAK,CAAC,eAAe;AAAA,IACzC;AAAA,IACA;AAAA,EACF,EAAE;AACJ;;;AE9QA;AAAA,EAKE;AAAA,EAEA;AAAA,OAEK;;;ACPA,IAAM,sBAAN,MAA6C;AAAA,EAClD,cAAc;AAAA,EAAC;AAAA,EAEf,MAAM,IAAI,KAAa;AACrB,WAAO,aAAa,QAAQ,GAAG;AAAA,EACjC;AAAA,EAEA,MAAM,IAAI,KAAa,OAAe;AACpC,iBAAa,QAAQ,KAAK,KAAK;AAAA,EACjC;AAAA,EAEA,MAAM,OAAO,KAAa;AACxB,iBAAa,WAAW,GAAG;AAAA,EAC7B;AAAA,EAEA,MAAM,WAAW;AACf,iBAAa,MAAM;AAAA,EACrB;AACF;;;ADeO,IAAM,4BAAN,cAIG,mBAAoE;AAAA;AAAA,EAE5E,aAAa;AACX,QAAI,OAAO,WAAW,aAAa;AAEjC,aAAO,IAAI,gBAAgB;AAAA,IAC7B,OAAO;AACL,aAAO,IAAI,oBAAoB;AAAA,IACjC;AAAA,EACF;AAAA,EAEA,MAAM,cACJ,OACA,WACA;AACA,QAAI,MAAM,WAAW;AACnB,aAAO,8BAA8B;AAAA,QACnC,MAAM,MAAM;AAAA,QACZ,SAAS,MAAM;AAAA,QACf,mBAAmB,KAAK;AAAA,MAC1B,CAAC;AAAA,IACH,OAAO;AACL,aAAO,yBAA4B;AAAA,QACjC,MAAM,MAAM;AAAA,QACZ,SAAS,MAAM;AAAA,QACf,eAAe,MAAM;AAAA,QACrB,aAAa,WAAW;AAAA,QACxB,iBAAiB,WAAW;AAAA,QAC5B,oBAAoB,MAAM;AAAA,QAC1B,mBAAmB,KAAK;AAAA,MAC1B,CAAC;AAAA,IACH;AAAA,EACF;AAAA,EAEA,aAAa,OAAmC;AAC9C,QAAI,CAAC,KAAK,OAAO;AACf,aAAO;AAAA,IACT;AAEA,WACE,KAAK,MAAM,KAAK,SAAS,MAAM,KAAK,QACpC,KAAK,MAAM,KAAK,SAAS,MAAM,KAAK,QACpC,KAAK,MAAM,cAAc,MAAM;AAAA,EAEnC;AACF;;;ALpDA,SAAS,uBAAuB;AArBhC,eAAe;AAQR,SAAS,iBACd,OACA,MAEA;AAAA,EACE,UAAU,OAAO,SAAS,KAAK,QAAQ,QAAQ,EAAE;AAAA,EACjD;AACF,IAA8C,CAAC,GACvC;AACR,SAAO,qBAAqB,OAAO,MAAM,SAAS,SAAS;AAC7D;AAMA,eAAsB,oCAEpB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAWE;AACA,QAAM,SAAS,MAAM,kBAAkB;AAAA,IACrC,WAAW,OAAO,SAAS;AAAA,IAC3B;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC;AAED,MAAI,QAAQ;AACV,WAAO,QAAQ;AAAA,MACb,CAAC;AAAA,MACD;AAAA,MACA,OAAO,SAAS,KAAK,QAAQ,QAAQ,EAAE;AAAA,IACzC;AAAA,EACF;AAEA,SAAO;AACT;","names":["cojsonInternals","handleAuthUpdate"]}